General

  • Target
    d69665f56ddef7ad4e71971f06432e59f1510a7194386e5f0e8926aea7b88e00
  • Size 37KB
  • Sample220414-rzbcbachar
  • SHA256 d69665f56ddef7ad4e71971f06432e59f1510a7194386e5f0e8926aea7b88e00
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Industroyer IEC-104 Module 1 IoCs

    Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.

  • Industroyer family

File Explorer

  • d69665f56ddef7ad4e71971f06432e59f1510a7194386e5f0e8926aea7b88e00
    .exe 37KB

d69665f56ddef7ad4e71971f06432e59f1510a7194386e5f0e8926aea7b88e00

  • IMPHASH 2cf6ff919d8af9170b36d01b351744f3
  • SHA256 d69665f56ddef7ad4e71971f06432e59f1510a7194386e5f0e8926aea7b88e00
  • MD5 SHA1 SHA512 SSDEEP
  • Industroyer IEC-104 Module

    Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.

Minor OS version
Major OS version
Entry point
20464
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths