General

  • Target

    Xiaro-nud3.zip

  • Size

    12.6MB

  • MD5

    54d6ec4be2ba0139cdce6fa545186ecc

  • SHA1

    08bba18d5e62eb32be81f96f90bc583e294e3aa4

  • SHA256

    81da75ada8452a79afd46750222e5284a2fb32be9ec763d577fe1dd6b47c7eaf

  • SHA512

    39da4597e1d8c74682be89ab986d47a9715674849630f96560b5aea415d3b3a007c06394e6f0b0878afd0b8c95731255a96d5ffbd69b9592f9de5394ed509226

  • SSDEEP

    393216:S5Mka0FfSJF3oEYvOPkTyGNTouwMFddwm2mto:S6xK+F3oHqkTysPFdd2

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xiaro-nud3.zip
    .zip
  • Decryptor.exe
    .exe windows:5 windows x64 arch:x64

    023abd09c65289e3a2df4aa2b19cccec


    Headers

    Imports

    Sections

  • edited_ransom.pyc
  • Screenshot(1).hm
  • Screenshot(2).hm
  • Screenshot(3).hm
  • Screenshot(4).hm
  • Screenshot(5).hm
  • Screenshot(6).hm
  • Screenshot(7).hm
  • Screenshot(8).hm
  • Screenshot(9).hm