Behavioral task
behavioral1
Sample
6b8e57d157a7d0567aa89b96bfedc463c1b46b6c2536dcdcd57a24c84cc45d3b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b8e57d157a7d0567aa89b96bfedc463c1b46b6c2536dcdcd57a24c84cc45d3b.exe
Resource
win10v2004-20220812-en
General
-
Target
9fcbcfda0d5d13154d8c58548e3fe8d06fbe0de42f079d6d066bea485574f215.zip
-
Size
217KB
-
MD5
6c1884593a02fdfa78c8401131a40373
-
SHA1
e259eb72606bf97c29888c98d62f08dbcbd52456
-
SHA256
9fcbcfda0d5d13154d8c58548e3fe8d06fbe0de42f079d6d066bea485574f215
-
SHA512
3a78fa0b733a187d2d28b091393c467a7431c05207170825240832df253379ed6f0478fa11342f1a25328639d8b73adb2a21771164048fd708e0c5c5b304c3fe
-
SSDEEP
3072:HHGJq9Gnwac/sZTPaYF/RS3mwP49pq9dw8dFmNRrLtEYh4z28RIasppNAcP5xmM:nGJq97adZTCR2249A3w86B6Ifjvn
Malware Config
Signatures
-
Chaos Ransomware 2 IoCs
resource yara_rule sample family_chaos static1/unpack001/6b8e57d157a7d0567aa89b96bfedc463c1b46b6c2536dcdcd57a24c84cc45d3b.exe family_chaos -
Chaos family
Files
-
9fcbcfda0d5d13154d8c58548e3fe8d06fbe0de42f079d6d066bea485574f215.zip.zip
-
6b8e57d157a7d0567aa89b96bfedc463c1b46b6c2536dcdcd57a24c84cc45d3b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ