Overview

overview

10

Static

static

10

6e4ff974c2...b2.exe

windows7-x64

10

6e4ff974c2...b2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6e4ff974c258619c66aba8cd048c4bb2
  • Size 114KB
  • Sample220825-y5vfpsbdc2
  • SHA256 cc1952ae11b76aaef6158e4a9bc75cdd90f365e47a5388766bb4ccba70f6a8f3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
wiperhermeticwiper

Malware Config

Signatures

  • Detect HermeticWiper 1 IoCs

    Detect HermeticWiper Payload.

    wiper
  • Hermeticwiper family
    hermeticwiper

File Explorer

  • 6e4ff974c258619c66aba8cd048c4bb2
    .exe 114KB

6e4ff974c258619c66aba8cd048c4bb2

  • IMPHASH 4233d97404e1fecedef6a46e0f7c09b9
  • SHA256 cc1952ae11b76aaef6158e4a9bc75cdd90f365e47a5388766bb4ccba70f6a8f3
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Detect HermeticWiper

    Detect HermeticWiper Payload.

    wiper

PE Signature issue

Digest
e8:79:5e:a2:88:25:4b:04:bf:94:46:9c:2e:36:d2:2e:25:0e:9b:be
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
20427
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths