ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
- SHA256 ea5f8513249e95e37e6af52548f78adf29f561710fe678cbfee6e3bdb2e02718
Behavioral task
behavioral1
Sample
1c195d273ccf2fbe86c66af4c0b5db5f6e2c4c4dc331b0b0e24d32f2ef57d9fa.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
1c195d273ccf2fbe86c66af4c0b5db5f6e2c4c4dc331b0b0e24d32f2ef57d9fa.exe
Resource
win11ltsc2024-20260709-en
Xorist is a ransomware first seen in 2020.
| resource | yara_rule |
|---|---|
| static1/unpack002/out.upx | family_xorist |
| resource | yara_rule |
|---|---|
| static1/unpack001/1c195d273ccf2fbe86c66af4c0b5db5f6e2c4c4dc331b0b0e24d32f2ef57d9fa.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/1c195d273ccf2fbe86c66af4c0b5db5f6e2c4c4dc331b0b0e24d32f2ef57d9fa.exe |
| unpack002/out.upx |
Unsigned PE
Checks for missing Authenticode signature.
Detected Xorist Ransomware
Unsigned PE
Checks for missing Authenticode signature.