Behavioral task
behavioral1
Sample
fc68c5aab307cd0da6476a150562f9fdfbbd768b2b5fa3bf4b912219209c8cf9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fc68c5aab307cd0da6476a150562f9fdfbbd768b2b5fa3bf4b912219209c8cf9.exe
Resource
win10v2004-20220812-en
General
-
Target
fc68c5aab307cd0da6476a150562f9fdfbbd768b2b5fa3bf4b912219209c8cf9
-
Size
22KB
-
MD5
f38910f1c71e210f710b0d2aed182f55
-
SHA1
b1ec33aafba903812914d2b8d90c5ee0c6055107
-
SHA256
fc68c5aab307cd0da6476a150562f9fdfbbd768b2b5fa3bf4b912219209c8cf9
-
SHA512
0c8e3315c062f41134df5ef534923b1ade7d7eaf804f789ced322638113c1e9e4228131cbd43fc2713d419e3ba12c5d43e43fdad1e04684998282e1f58b3391b
-
SSDEEP
384:63Mg/bqo2etUq4/fHapyj8ZOjPJNr91CaTb5geM:Aqo2jNSpjZOjhNr9ZTbeeM
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
fc68c5aab307cd0da6476a150562f9fdfbbd768b2b5fa3bf4b912219209c8cf9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ