Static task
static1
Behavioral task
behavioral1
Sample
d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426.bin.sample.exe
Resource
win7-en-20210920
windows7_x64
0 signatures
0 seconds
General
-
Target
d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426.bin.sample
-
Size
192KB
-
MD5
20ab243fee91b6c8df23e1ddefff2727
-
SHA1
e2b098d36e51d2b7405fadbd578cf9774433f85a
-
SHA256
d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426
-
SHA512
153955fb3418797676a49d3d563affc8b5a987a5e5740de29ae2b24ba178c39ee95346b98b7ec79bf6c370cf0067eb206abc68465aadd5cd7cf31ab55071fde0
Score
10/10
Malware Config
Signatures
-
Detect the Prometheus's Thanos ransomware using the build ID and the Killproc strings. 1 IoCs
Detect the Prometheus's Thanos ransomware.
Processes:
resource yara_rule sample ransomware_win_thanos -
Thanos family
Files
-
d991aa2b1fad608b567be28e2d13d3d4f48eea3dea8f5d51a8e42aa9a2637426.bin.sample.exe windows x86