Overview

overview

10

Static

static

10

bin/Encode....4.exe

windows11-21h2-x64

3

Resubmissions

04-01-2025 10:12

250104-l8py6svlfx 10

04-01-2025 10:11

250104-l7xbvsxjgk 10

04-01-2025 10:09

250104-l61ynaxjdr 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EncoderBuilder password vazonez.rar

  • Size

    557KB

  • MD5

    db9a548705cfc15f405f571fddecffe0

  • SHA1

    c43f7d464a44f442a8a3fb5bd4e77c290c02240f

  • SHA256

    5986ff1c3dc4ae35fb9747b6b591f527cd1b77393cc3a77b936a46d4b3936c29

  • SHA512

    0a842a158eee3239b024494d250bc1a81f2d0c53778aa755629d601bfafc53fec06e19c955ea4d0d8b81a4bfcb562f36fbbe806bbaa66734f23c0b877351cf18

  • SSDEEP

    12288:MAXGxT7VXQsuNcw4GcRxf4u4xO1OBa4dtCtog/8p+lTSG:yT7VXcNYVxgxOArg0klTSG

Score
10/10
upxxorist

Malware Config

Signatures

  • Detected Xorist Ransomware 2 IoCs
  • Xorist family
    xorist
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • EncoderBuilder password vazonez.rar
    .rar

    Password: vazonez

  • bin/Encoder_Builder_v2.4.exe
    .exe windows:4 windows x86 arch:x86

    Password: vazonez


    Headers

    Sections

  • src/Builder/Builder.bdsproj
  • src/Builder/Builder.bdsproj.local
  • src/Builder/Builder.cfg
  • src/Builder/Builder.dpr
  • src/Builder/Builder.identcache
  • src/Builder/Builder.res
  • src/Builder/Md5.dcu
  • src/Builder/Md5.pas
  • src/Builder/RESOURCES.PAS
  • src/Builder/RESOURCES.dcu
  • src/Builder/Strawberry.ico
  • src/Builder/Unit1.dcu
  • src/Builder/Unit1.dfm
  • src/Builder/Unit1.pas
    .vbs
  • src/Builder/upx_bin/build.bat
  • src/Builder/upx_bin/upx.RES
  • src/Builder/upx_bin/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • src/Builder/upx_bin/upx.rc
  • src/crypter/1.bmp
  • src/crypter/Crypter.asm
  • src/crypter/Decrypt.asm
  • src/crypter/Hash.asm
  • src/crypter/Notification.asm
  • src/crypter/ReadOptions.asm
  • src/crypter/Recursive.asm
  • src/crypter/SelfDelete.asm
  • src/crypter/TEA.asm
  • src/crypter/Window.asm
  • src/crypter/build.bat
  • src/crypter/crypter.exe
    .exe windows:4 windows x86 arch:x86

    Password: vazonez

    0d5a4c77fb840a628560e02b85835ba4


    Headers

    Imports

    Sections

  • src/crypter/manifest.xml
  • src/crypter/rsrc.rc
  • src/crypter/stub.RES
  • src/crypter/stub.rc