chaos | df6a0e6193dae4d6c0108b3fd74e61bb8e56795d3841c44b3bcd361c7302e506 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df6a0e6193dae4d6c0108b3fd74e61bb8e56795d3841c44b3bcd361c7302e506
Size

473KB
MD5

f3267712a7444254d57d783d2226bcd8
SHA1

6e8611dc746a04055a2fc5b8525eab2a713b956a
SHA256

df6a0e6193dae4d6c0108b3fd74e61bb8e56795d3841c44b3bcd361c7302e506
SHA512

c4697fecbff2b185bc12e5964a87ac0a15bc0899614d3964e8aafcf0244264862b43c314cada57b3ef70caedf8f2c427a2bf8ddc782719c6cb7529d3fff4ff8f
SSDEEP

3072:9UJAYdi2YcRVm16Pn6tpzqJG/sX9i2YcRPm16Pn6ckCjSH5EyR9aKZt18rTu+i20:9aiWm162qJEsNiym16ryAiy0

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

df6a0e6193dae4d6c0108b3fd74e61bb8e56795d3841c44b3bcd361c7302e506
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ