Resubmissions
29-10-2021 12:12
211029-pdkbzsaaap 10Static task
static1
Behavioral task
behavioral1
Sample
32ec78179b1516765fd2ec4da82404352cb6837a906c7493283ef578930273e6.exe
Resource
win7-en-20210920
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
32ec78179b1516765fd2ec4da82404352cb6837a906c7493283ef578930273e6.exe
Resource
win10-en-20211014
windows10_x64
0 signatures
0 seconds
General
-
Target
32ec78179b1516765fd2ec4da82404352cb6837a906c7493283ef578930273e6
-
Size
152KB
-
MD5
af9622a8b6a46866f00f9ff35b7f16b6
-
SHA1
6a81a6e01f502cdb5893d423417bde2448882ac2
-
SHA256
32ec78179b1516765fd2ec4da82404352cb6837a906c7493283ef578930273e6
-
SHA512
e4effba4959ff985bd63cd0f533c368c88370a25c90eef5e9bef82eab101d2ea1a2bbd33aad1da3cb629b894c2777c8f6c35fd6729b65b8580c54f90a13fb2c2
Score
10/10
Malware Config
Signatures
-
Detect the Prometheus's Thanos ransomware using the build ID and the Killproc strings. 1 IoCs
Detect the Prometheus's Thanos ransomware.
Processes:
resource yara_rule sample ransomware_win_thanos -
Thanos family
Files
-
32ec78179b1516765fd2ec4da82404352cb6837a906c7493283ef578930273e6.exe windows x86