Resubmissions
04-01-2025 10:12
250104-l8py6svlfx 1004-01-2025 10:11
250104-l7xbvsxjgk 1004-01-2025 10:09
250104-l61ynaxjdr 10Analysis
-
max time kernel
20s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
04-01-2025 10:11
General
-
Target
bin/Encoder_Builder_v2.4.exe
-
Size
883KB
-
MD5
4c824eb8598f175d41e9a2ea06129890
-
SHA1
64b57ea796956cbb60ce4fc702239cbc395aee6f
-
SHA256
7a57d83ae7fde49cfd57e7d2753570306a09c6082bc82f75c89d23fa650a0011
-
SHA512
122e509a3101a67d867f7a3653c8e5d2f838a04c7cb6a97af52e6b35ad709099a3b5940bca48be225ef0d8403537150f232f6137689180a6fd62affef5114845
-
SSDEEP
24576:LIzxV583IWM6MV1KB7pgLB5rnjjUafpVMUXfnuq:8zT5oarn0KtX2q
Score
10/10
Malware Config
Signatures
-
Detected Xorist Ransomware 1 IoCs
-
Xorist Ransomware
Xorist is a ransomware first seen in 2020.
-
Xorist family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\Encoder_Builder_v2.4.exe"C:\Users\Admin\AppData\Local\Temp\bin\Encoder_Builder_v2.4.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
904KB