Behavioral task
behavioral1
Sample
ebc90f7e16ee51150267c78495d59e3a2a2b3880c7541ca3df0ff287b528fc41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebc90f7e16ee51150267c78495d59e3a2a2b3880c7541ca3df0ff287b528fc41.exe
Resource
win10v2004-20220812-en
General
-
Target
55ff901e986a52d6e0700210a74a1ece69fdb3e0c5497f641ec6483a3c0f8751
-
Size
329KB
-
MD5
2f0c08446e6f6dd75aceaf67ebad2f77
-
SHA1
a58dd9be0907debb8f39cb357e458a93612ac79c
-
SHA256
55ff901e986a52d6e0700210a74a1ece69fdb3e0c5497f641ec6483a3c0f8751
-
SHA512
76b12e89c69105ca97075b2490870248813ae732bdbeb1c161b46bd4ba13d3a74b8e7d7f901b031a909cd8a6c42af03f703a99c63b5136648b2e7fe97470a8c7
-
SSDEEP
6144:gcVbL0hiIOM8+LDCvzCnQHw67feMv8KiPuTL94H:gcVJIOd+vCvnJ8tPuF4H
Malware Config
Signatures
-
Chaos Ransomware 2 IoCs
resource yara_rule sample family_chaos static1/unpack001/ebc90f7e16ee51150267c78495d59e3a2a2b3880c7541ca3df0ff287b528fc41.exe family_chaos -
Chaos family
Files
-
55ff901e986a52d6e0700210a74a1ece69fdb3e0c5497f641ec6483a3c0f8751.zip
-
ebc90f7e16ee51150267c78495d59e3a2a2b3880c7541ca3df0ff287b528fc41.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ