Overview

overview

10

Static

static

10

update.exe

windows7_x64

7

update.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    update.bin

  • Size

    3.5MB

  • MD5

    3d1cc4ef33bad0e39c757fce317ef82a

  • SHA1

    f34e4b7080aa2ee5cfee2dac38ec0c306203b4ac

  • SHA256

    e5262db186c97bbe533f0a674b08ecdafa3798ea7bc17c705df526419c168b60

  • SHA512

    8294b31a0f12fdc583ec1df5b9e36dfbb53745588da517c8c7842b197f96190b3228c759604df60159265e0f384bae0042ccc63ee966e81dc59b89b934b94e5b

  • SSDEEP

    49152:QAdGB73ejP3+EMfRdASVaAvrC5Xh602+:QAgR3epMjASHch

Score
10/10
zebrocyekans

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
    ekans
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
    zebrocy

Files

  • update.bin
    .exe windows x86

    96c44fa1eee2c4e9b9e77d7bf42d59e6


    Headers

    Imports

    Sections