Overview

overview

8

Static

static

10

gVcWDWENI8.exe

windows7_x64

8

gVcWDWENI8.exe

windows10_x64

8

Resubmissions

07-06-2021 10:08

210607-9hpr7n82ba 10

03-06-2021 20:20

210603-mpsat3rm4j 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gVcWDWENI8.exe

  • Size

    142KB

  • MD5

    e1f063d63a75e0e0e864052b1a50ab06

  • SHA1

    75d941a28cf0ade2ef2c16dfacbdeb36a51ccaf7

  • SHA256

    8c723af5c826adea162ef3f2e37a1cca7b43d549c9a5fab7c9ff17f65eb5d8e7

  • SHA512

    25681b210ee18bd60ba3fef496769283d51dc516569e1f1834d6d23a5927c1684b25ff67baf5fba66c908b364a13784f49facdde7a98b2fb8a8a41a2ec792ae3

Score
10/10
ransomwarethanos

Malware Config

Signatures

  • Detect the Prometheus's Thanos ransomware using the build ID and the Killproc strings. 1 IoCs

    Detect the Prometheus's Thanos ransomware.

    ransomware
  • Thanos family
    thanos

Files

  • gVcWDWENI8.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections