General

  • Target

    7907dd95c1d36cf3dc842a1bd804f0db511a0f68f4b3d382c23a3c974a383cad

  • Size

    133KB

  • MD5

    a193184e61e34e2bc36289deaafdec37

  • SHA1

    94488f214b165512d2fc0438a581f5c9e3bd4d4c

  • SHA256

    7907dd95c1d36cf3dc842a1bd804f0db511a0f68f4b3d382c23a3c974a383cad

  • SHA512

    113bccfa08798158cb8bc31eadfc0d4e91645422cadda7cc2ece753ad5a51c7260a7ff11aae25d7802965979aa996ef6428d5eb9882532a4f55518d2107b136f

  • SSDEEP

    3072:McaprOfoaXmgD31r4VWBvRZoiTprUZNZ9VQ6s6W9:McuOJ2gD31QW51pgE6st9

Score
10/10

Malware Config

Signatures

  • Industroyer 1 IoCs

    Contains code associated with parsing industroyer's configuration file.

  • Industroyer IEC-104 Module 1 IoCs

    Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.

  • Industroyer family

Files

  • 7907dd95c1d36cf3dc842a1bd804f0db511a0f68f4b3d382c23a3c974a383cad
    .dll windows x86

    f3fa7eda5f4e7d94a714ad0e0880245e


    Code Sign

    Headers

    Imports

    Exports

    Sections