General

  • Target

    5cfd4884faa30fbdd5af432e70b22c033f36f032b4b92f84aead84b57b5dd592

  • Size

    1024KB

  • MD5

    fe8f17003018cf469f2b5d0bd19ba80e

  • SHA1

    618caf996e8997d5e0dbf88261d86ca36fd952fd

  • SHA256

    5cfd4884faa30fbdd5af432e70b22c033f36f032b4b92f84aead84b57b5dd592

  • SHA512

    217aff25648c684502cdc6aeea082b32eba984d51ff998b864424a2cc55563ad25961ca06e072e2e9a7fe998ef727feb664c8dfdaf1043ebac7cdce5be496aab

  • SSDEEP

    12288:uR8ow0YkyDUPsigvCpbXdcgHfpmA3cuuBgSDPY0qCLrh6Wa:uRLwzHabXdcghmAz84OUWa

Malware Config

Signatures

  • EvilNum C# Component 1 IoCs
  • Evilnum family
  • GandCrab Payload 1 IoCs
  • Gandcrab family
  • XMRig Miner Payload 1 IoCs
  • Xmrig family

Files

  • 5cfd4884faa30fbdd5af432e70b22c033f36f032b4b92f84aead84b57b5dd592
    .vbs