Static task
static1
Behavioral task
behavioral1
Sample
edef8b955468236c6323e9019abb10c324c27b4f5667bc3f85f3a097b2e5159a.sample.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
edef8b955468236c6323e9019abb10c324c27b4f5667bc3f85f3a097b2e5159a.sample.exe
Resource
win10v20210408
General
-
Target
edef8b955468236c6323e9019abb10c324c27b4f5667bc3f85f3a097b2e5159a.sample
-
Size
3.8MB
-
MD5
7ddb09db3fb9b01fa931c2a1a41e13e1
-
SHA1
8941f55d8f9842cb4cbd5215adf3345afd16e6cb
-
SHA256
edef8b955468236c6323e9019abb10c324c27b4f5667bc3f85f3a097b2e5159a
-
SHA512
2d4e99e409d1eaa56f9eb2fe5405a25896522c6f11f040d073ca8dc4f23d5331a63419fd19c1c38ae4f4296eac954189198890e8b8ea16c844a9ce09bde8cc69
Malware Config
Signatures
-
Ekans Ransomware 1 IoCs
Executable looks like Ekans ICS ransomware sample.
Processes:
resource yara_rule sample family_ekans -
Ekans family
Files
-
edef8b955468236c6323e9019abb10c324c27b4f5667bc3f85f3a097b2e5159a.sample.exe windows x86