General

  • Target

    Encoder Builder v2.4 (pass DIMA-XP).rar

  • Size

    1.2MB

  • Sample

    241210-ywjmvasjbn

  • MD5

    c19584765504783624918d1459cd6499

  • SHA1

    3c87b34cf3b9243f574d490fcd4031dd9edf68e8

  • SHA256

    b5cd4b8c5c616fab5924452155581bc94e0fe0d67cf8286e300be3d985ca5ef6

  • SHA512

    b9869c78359720d2aded618a0a01d3091f2cc38087af7c2e1aad07917a7053c9e25c21cd498af7b72d53ffd362d9cba09aac451d6d765316a8cbb4356b77c155

  • SSDEEP

    24576:ZIJujiWNRlr17yDmy67P3jbDMFhVnbk3KNADaIPRn5tJKzjU978F6+:BRlrRxymPgFrNANN5Tuj5Z

Malware Config

Targets

    • Target

      Encoder Builder v2.4 (pass DIMA-XP).rar

    • Size

      1.2MB

    • MD5

      c19584765504783624918d1459cd6499

    • SHA1

      3c87b34cf3b9243f574d490fcd4031dd9edf68e8

    • SHA256

      b5cd4b8c5c616fab5924452155581bc94e0fe0d67cf8286e300be3d985ca5ef6

    • SHA512

      b9869c78359720d2aded618a0a01d3091f2cc38087af7c2e1aad07917a7053c9e25c21cd498af7b72d53ffd362d9cba09aac451d6d765316a8cbb4356b77c155

    • SSDEEP

      24576:ZIJujiWNRlr17yDmy67P3jbDMFhVnbk3KNADaIPRn5tJKzjU978F6+:BRlrRxymPgFrNANN5Tuj5Z

    • Detected Xorist Ransomware

    • Xorist Ransomware

      Xorist is a ransomware first seen in 2020.

    • Xorist family

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks