xorist | 80b156fb3106a577e24eebb566dc92af_JaffaCakes118

General

Target

80b156fb3106a577e24eebb566dc92af_JaffaCakes118
Size

40KB
MD5

80b156fb3106a577e24eebb566dc92af
SHA1

ead6b12a477fdd9d1fe254fa20b6f62adba79ee2
SHA256

ddc65ddd5ca018e866dee73a108495e2fdd9ce2c89ca39cc5714b98f285d52b5
SHA512

4a42bd8ee87f3a075d6406dac757c9d872c99c6db310cdb5b2b0f9b1a943ae43e6ef9e3b8ecb1e5196a8fa21b62f0e1a81f92ddbb739ea37af0746d69d7ede81
SSDEEP

384:RebFNw4Pk1itKkpAjjalrwxjeAqYvjS7kDCgSEEk0BG+0MB:R0FmBkpKjNheLY77DCUEBL

Score

10^/10

upx xorist

Detected Xorist Ransomware 1 IoCs

Processes:

resource yara_rule

sample family_xorist
Xorist family
xorist
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_xorist

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
80b156fb3106a577e24eebb566dc92af_JaffaCakes118