Resubmissions
12-01-2025 13:19
250112-qkzkxswnaq 1012-01-2025 13:17
250112-qjr5fswmfp 1012-01-2025 13:15
250112-qhcclstlgt 10Analysis
-
max time kernel
98s -
max time network
99s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-uk -
resource tags
-
submitted
12-01-2025 13:15
General
-
Target
bin/Encoder_Builder_v2.4.exe
-
Size
883KB
-
MD5
4c824eb8598f175d41e9a2ea06129890
-
SHA1
64b57ea796956cbb60ce4fc702239cbc395aee6f
-
SHA256
7a57d83ae7fde49cfd57e7d2753570306a09c6082bc82f75c89d23fa650a0011
-
SHA512
122e509a3101a67d867f7a3653c8e5d2f838a04c7cb6a97af52e6b35ad709099a3b5940bca48be225ef0d8403537150f232f6137689180a6fd62affef5114845
-
SSDEEP
24576:LIzxV583IWM6MV1KB7pgLB5rnjjUafpVMUXfnuq:8zT5oarn0KtX2q
Score
10/10
Malware Config
Signatures
-
Detected Xorist Ransomware 4 IoCs
-
Xorist Ransomware
Xorist is a ransomware first seen in 2020.
-
Xorist family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bin\Encoder_Builder_v2.4.exe"C:\Users\Admin\AppData\Local\Temp\bin\Encoder_Builder_v2.4.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
904KB
-
Filesize
904KB
-
Filesize
904KB
-
Filesize
904KB