Extracted

• • Target

    Ransom.Win32.Tescrypt.pz-deddb8383fc1b2f35138408351d07b090b9bd8dd3bd43e04d5c3ffd42a6d003aN

  • Size

    68KB

  • MD5

    ea181c784d007ed62403d5a6c766a610

  • SHA1

    a0edb8ef1fd5674a36adc48c218ae951cf17d1c3

  • SHA256

    deddb8383fc1b2f35138408351d07b090b9bd8dd3bd43e04d5c3ffd42a6d003a

  • SHA512

    34e7c090f22544f01e416c560bdd510bfcba9e0d002567c6050dfd748000abef1bf61d6704f0cde481f0ac90a62134a3b1cd8c6041708152de2a190422c6572a

  • SSDEEP

    1536:fgWJBwVSclkxvodVSXq7vTFtb47XPArcxvgLLqZ10CmuJdr:fgWJi1kxvqVCq7LFtE7/ArcxkOZ1Bbdr

  Score

  7^/10

  discoveryupx

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2