chaos | 024f23eff975f6989dd2dc4340886961[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

024f23eff975f6989dd2dc4340886961.bin
Size

1.2MB
MD5

6b0f9767eda76eaed40d5137747b5caa
SHA1

dd179ccfa6ea0a649ce889e768f0919574f7a1c4
SHA256

798c17f46fef7a981d10ed9f2ebfae3b25833e03b10aa889e53b24a3d0a5ddfe
SHA512

af79c38df3ee0bffbba3ac298d02273286b5396e000ee9c735db09c4dfecf72badacc89ef9f5f094661585c1fcde5dc9c4496afc6bbb76f8fc22367d51bfcd44
SSDEEP

24576:EXRVVJUUR/2hcYeAj8fU/radxr8Z9cFYACOYUKRo0VYzr+XgnyxYjApeVz:sRJgh3As/6xSuqOdKyfIgcuApGz

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
static1/unpack001/75b45fea6000b6cb5e88b786e164c777c410e11fdcf1ff99b66b43096223d734.exe	family_chaos

Chaos family
chaos

Files

024f23eff975f6989dd2dc4340886961.bin
.zip

Password: infected
75b45fea6000b6cb5e88b786e164c777c410e11fdcf1ff99b66b43096223d734.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ