industroyer | 44ba5f629c731604580c863afa7e84c87e0ebf431294fa4646c83f8820d2ffa5

General

Target
44ba5f629c731604580c863afa7e84c87e0ebf431294fa4646c83f8820d2ffa5
Size 480KB
Sample220214-ffc61sgfal
SHA256 44ba5f629c731604580c863afa7e84c87e0ebf431294fa4646c83f8820d2ffa5
MD5 46ff7a914be72003199e051cab2b2c0d
SHA1 6b1785ae3d2415cd12eedbe4d232a2887d5aa7fb
SHA512 3c7ce281805ded31fbdd74f66f8daefb534e7b87d03014580446416c962651fa292b44c75518841eb478b90656f8242f1f01c3779f164e38f87c11d692029fea
SSDEEP 1536:ipIv8wiD3kkZZpgq8QK8mfkCwbqidQY1sWfScdAUeMfh9UQ:kwPQ6MbjF3TAUeMZ9J
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

industroyer

Industroyer Wiper Module 2 IoCs

Registry wiper functionality assoicated with Industroyer.

resource	yara_rule
sample	win_industroyer_w7
sample	win_industroyer_w8

SHA256 44ba5f629c731604580c863afa7e84c87e0ebf431294fa4646c83f8820d2ffa5
MD5 46ff7a914be72003199e051cab2b2c0d
SHA1 6b1785ae3d2415cd12eedbe4d232a2887d5aa7fb
SHA512 3c7ce281805ded31fbdd74f66f8daefb534e7b87d03014580446416c962651fa292b44c75518841eb478b90656f8242f1f01c3779f164e38f87c11d692029fea
SSDEEP 1536:ipIv8wiD3kkZZpgq8QK8mfkCwbqidQY1sWfScdAUeMfh9UQ:kwPQ6MbjF3TAUeMZ9J
MD5 SHA1 SHA512 SSDEEP

windows x86

Industroyer Wiper Module

Registry wiper functionality assoicated with Industroyer.

Minor OS version

Major OS version

Entry point

6817

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths