Behavioral task
behavioral1
Sample
bee28de2d33aad555f317d2d0eab8761be2439d18784cc55eb43292fa887cbfd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bee28de2d33aad555f317d2d0eab8761be2439d18784cc55eb43292fa887cbfd.exe
Resource
win10v2004-20220812-en
General
-
Target
c47b566e323378c3961d8acca858fa8bd7e051f3b7f2a255ed08d46ab7b141b8
-
Size
197KB
-
MD5
e3059abecc81243e59927bebe96f8d0d
-
SHA1
ea8475615bd2078e8906229b52eb66b75f9a4b4f
-
SHA256
c47b566e323378c3961d8acca858fa8bd7e051f3b7f2a255ed08d46ab7b141b8
-
SHA512
02ae68014ec359a4ec383577fb40243603b30c65ece4152310907e5f115e7d39631ff262df6b4036268f8913aee6dbf9085e9fa7450ee0861e1533eb55ec2654
-
SSDEEP
3072:/gMGTtr932o5JcWxxxxxxxN5FtUZiAl5UFoN+A:+Rr93F2WxxxxxxxN5FtUZNl5aU
Malware Config
Signatures
-
Chaos Ransomware 2 IoCs
resource yara_rule sample family_chaos static1/unpack001/bee28de2d33aad555f317d2d0eab8761be2439d18784cc55eb43292fa887cbfd.exe family_chaos -
Chaos family
Files
-
c47b566e323378c3961d8acca858fa8bd7e051f3b7f2a255ed08d46ab7b141b8.zip
-
bee28de2d33aad555f317d2d0eab8761be2439d18784cc55eb43292fa887cbfd.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ