General
-
Target
xhvXnps.exe
-
Size
22KB
-
MD5
a8e46ccd0a0eddb53ae9486b82ac2da7
-
SHA1
cd8d2c8e16b4f669eaaeaa5ad49860ce71b9f323
-
SHA256
809ace7cfbca9f9a1f385fbd0a07c07c8d145a52075e936ca808b8365e22b4d1
-
SHA512
b394662e2ce39f51bd065f289926cfbf0ebbdfcb726c6efbb1589e14aa6d0e52c03372d68aab2dca4effe0bc1d972e3deebbeb6232d9606579a81677673c663c
-
SSDEEP
384:Gprr1gkDCgSfj46VQWb+nKNyXaHX7xEMgfkwtHZ4mOLQFg+UZpHcFc48sAiqNB:0rVDCb4Cy5XWxwswlkLQFYZRcF98sP4
Score
10/10
Malware Config
Signatures
-
Detected Xorist Ransomware 1 IoCs
-
Xorist family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
xhvXnps.exe
Headers
Sections
-
out.upx
Headers
Sections