00133805d692da064e8e47b1d06298998764c5284606bbcd79ef753ca68cac41 (SHA256)
2018-05-08-Xorist-ransomware-artifacts.zip.exe
Created at 2018-06-10 10:54:00
Notifications (2/3)
Every analysis has a preconfigured maximum VM disk size for temporary changes. This limit was reached during this analysis and, as an result, the analysis was terminated prematurely.
Some extracted files may be missing in the report since the total file extraction size limit was reached during the analysis. You can increase the limit in the configuration settings.
Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.
Top Threat Indicators (View all 357 threat indicators)
| Category | Operation | Classification |
|---|---|---|
| File System | Modifies content of user files | Ransomware |
| File System | Renames user files | Ransomware |
| Anti Analysis | Tries to evade analysis | - |
Screenshots
Monitored Processes
Analysis Information
| Creation Time | 2018-06-10 12:54 (UTC+2) |
| Analysis Duration | 00:01:28 |
| Number of Monitored Processes | 1 |
| Execution Successful |
|
| Reputation Enabled |
|
| Termination Reason | RAM disk exhausted |
| Tags |
Analyzer and Virtual Machine Information
| Analyzer Version | 2.3.0 |
| Analyzer Build Date | 2018-04-12 16:32 (UTC+2) |
| Adobe Acrobat Reader Version | 10.0.0 |
| Microsoft Office | 2010 |
| Microsoft Office Version | 14.0.4762.1000 |
| Microsoft Project Version | 14.0.6023.1000 |
| Microsoft Visio Version | 14.0.6022.1000 |
| Internet Explorer Version | 8.0.7601.17514 |
| Chrome Version | 58.0.3029.110 |
| Firefox Version | 25.0 |
| Flash Version | 11.2.202.233 |
| Java Version | 7.0.450.18 |
| VM Name | win7_64_sp1 |
| VM Architecture | x86 64-bit |
| VM OS | Windows 7 |
| VM Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Sample Information
| ID | #58326 |
| MD5 Hash Value | c0306554fda888e1006cf60b31dddd8c |
| SHA1 Hash Value | e1f67fdde289790348fff5c2bf7d98fb3ea84cda |
| SHA256 Hash Value | 00133805d692da064e8e47b1d06298998764c5284606bbcd79ef753ca68cac41 |
| Filename | 2018-05-08-Xorist-ransomware-artifacts.zip.exe |
| File Size | 15.00 KB |
| File Type | Windows Exe (x86-32) |
