Behavioral task
behavioral1
Sample
9a4827a78e363d84ea0e334e842ab039+a0d222d2fd9cf90a47a134ef571232ee482a45f7+ac7a29cb82b7b3e50d8aaa0da5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a4827a78e363d84ea0e334e842ab039+a0d222d2fd9cf90a47a134ef571232ee482a45f7+ac7a29cb82b7b3e50d8aaa0da5.exe
Resource
win10v2004-20220812-en
General
-
Target
9a4827a78e363d84ea0e334e842ab039+a0d222d2fd9cf90a47a134ef571232ee482a45f7+ac7a29cb82b7b3e50d8aaa0da5e431f0b466de07dad241e5b6090cf71963e3b8
-
Size
325KB
-
MD5
9a4827a78e363d84ea0e334e842ab039
-
SHA1
a0d222d2fd9cf90a47a134ef571232ee482a45f7
-
SHA256
ac7a29cb82b7b3e50d8aaa0da5e431f0b466de07dad241e5b6090cf71963e3b8
-
SHA512
0f20fbf72e254155f0b2403488f5d8262c98138335380f3267afed6b79b91f2c9198924853dccb5b60bc9075876a700e12fc7b8509075bdb3b13776d3514ad0c
-
SSDEEP
6144:9dCr9fPhxhdsVFGEeRJk8nrKfQhCd/hAxno0yu:TEhxbsVFGEeRJk8mQE7Axqu
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
9a4827a78e363d84ea0e334e842ab039+a0d222d2fd9cf90a47a134ef571232ee482a45f7+ac7a29cb82b7b3e50d8aaa0da5e431f0b466de07dad241e5b6090cf71963e3b8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ