General

  • Target

    LCrypt0rX.zip

  • Size

    3.4MB

  • MD5

    a13f2d8f3cf73940208a68e39740b092

  • SHA1

    cc786c0d721c97bcc9485ef503ea0fedbfda17ad

  • SHA256

    8c05d0cfd8963829f2a1a637cb373e8dd4b97effd129b28230899deb38abf48d

  • SHA512

    b4f0c9854bc69aad2e8ab03830b9332e40d5ccb78ff2d6091d5553ecac866840cd475cff814999afe8ab7bbd4ea2ed6693e4691ce0ff9d6c3149959f28c9ff7e

  • SSDEEP

    49152:f5j60usEz1v8aMA0qULsIoYrVFBPOS+skFADvk+2Q+7UoUzig/A0jx5fMq+yXN8f:fEa+VNUhlOS+FF7+2PwaAA0VlMnydg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LCrypt0rX.zip
    .zip

    Password: VBSFileEncrypt

  • LCRYPT0R/LCRYPT (OBFUSCATED).vbs
  • LCRYPT0R/LCrypt0rX.vbs
    .vbs
  • LCRYPT0R/PASSWORD_VBSFileEncrypt
  • PLEASE READ ME.txt
  • other malware cuz why not/[email protected]
    .exe windows:4 windows x86 arch:x86

    Password: VBSFileEncrypt

    68f013d7437aa653a8a98a05807afeb1


    Headers

    Imports

    Sections

  • other malware cuz why not/loveletterworm.vbs
    .vbs
  • sig.vbs
    .vbs