chaos | 75bd0447e9c391f10792e720f7f4bfd5[.]bin | Triage

Sharing

General

Target

75bd0447e9c391f10792e720f7f4bfd5.bin
Size

1.2MB
MD5

72c775f9e1c6ac933705471ffca118b9
SHA1

4a9b8d1e6bc2a740dcd4da9d294f5b49bf775c60
SHA256

1e2fc62fc664135e0a9668cf4736c653c3edc1d9d7052d38937ed8620b11316b
SHA512

b7c0436980b95ebcdd56767e10c6f2aad7b40217e04bbeba168cd0ad6c4e2e591c5b6fd7cb92228fd081d63f898980627964f40d6274e1e2c225037a4123fc41
SSDEEP

24576:cSjNtF3WRx0yEw19T37DL21k/Zos/GHwnb5KFs18TUO4uv+A/1nq:jNtlXw1UPsIMbYe8YJA/1q

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
static1/unpack001/684274340a8524713ddaf388412f968ef97109ed33d3c5d89290b721016bcc57.exe	family_chaos

Chaos family
chaos

Files

75bd0447e9c391f10792e720f7f4bfd5.bin
.zip

Password: infected
684274340a8524713ddaf388412f968ef97109ed33d3c5d89290b721016bcc57.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ