General

  • Target

    b4b8368d6d524f70a91dcdab4db707f0_JaffaCakes118

  • Size

    5KB

  • MD5

    b4b8368d6d524f70a91dcdab4db707f0

  • SHA1

    15734e26de0723d7caba733f47c22c5c713cac72

  • SHA256

    d014fe2e7f352ab44ad2a92dfeaec304e3d0aea22dab6c86c185dd96dbe20b0f

  • SHA512

    3738d0b8370f04cf514a1a41fe21c489309f61c65816a705fdf2d684d05528329763c48208a829e1c98b1dccb8ed85b4754dd66611245ccb0e331672d5a65a80

  • SSDEEP

    96:VIZVrD7N6Ox/lqwMr5cICP86pzoxl0vAY2NRCEgtrZrg/SGr4YVO8afqspzA1A:aZy6/lDmGICk6p8xuV2SEMrZMBssO8iF

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4b8368d6d524f70a91dcdab4db707f0_JaffaCakes118
    .7z
  • svhitsa.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections