General

  • Target
    ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
  • Size 7KB
  • Sample260812-pergpawfmd
  • SHA256 ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Xorist Ransomware

    Xorist is a ransomware first seen in 2020.

  • Detected Xorist Ransomware 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
    .zip 7KB
  • 1c195d273ccf2fbe86c66af4c0b5db5f6e2c4c4dc331b0b0e24d32f2ef57d9fa.exe
    .exe 9KB
  • out.upx
    .exe 843KB

ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718

  • SHA256 ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected