Overview

overview

10

Static

static

10

database.tar

windows10-2004-x64

9

Resubmissions

30-07-2023 23:06

230730-23w4asbf54 10

30-07-2023 20:04

230730-ytlz7abc77 10

30-07-2023 20:00

230730-yqxyaabc67 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    database.iso

  • Size

    69.7MB

  • MD5

    ea91bffa35a90c625af0fa48b10b7efe

  • SHA1

    d6d3818f44d82c1e3e2933aa13e87c592d4e7670

  • SHA256

    35f81c70e570891c59d7fdcef17d22d6f6df913a0e30dcb1dd6fc42a38b48475

  • SHA512

    a9c53f487f3552fe7749ba0a9c79cf6a8b3c06794f7862b696c6e04f164cb0630791ed772120267e5c9c0276cc0efc4b269fa4629575df544bcd4f745954a74c

  • SSDEEP

    1572864:UvrzuXaQLrouRp2OztQNmsoF5bfq1oDRl6toF88B99ea7/KOAhi:QrzELrDhQ0soF5bm6d8A5n

Score
10/10
upxchaos

Malware Config

Signatures

  • Chaos Ransomware 2 IoCs
  • Chaos family
    chaos
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • database.iso
    .tar

    Password: infected

  • BootWiper.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • Chaos Ransomware BuilderV4.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • DELmE's Batch Virus Generator.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections

  • FakeCHKDSK.exe
    .exe windows x86

    Password: infected

    12e12319f1029ec4f8fcbed7e82df162


    Headers

    Imports

    Sections

  • Install PanOS 10 Sun Valley.exe
    .exe windows x64

    Password: infected


    Headers

    Sections

  • LixoSafe.exe
    .exe windows x86

    Password: infected

    002d1ef202fae9f2a9d1af604318eefb


    Headers

    Imports

    Sections

  • Maltoolkit4.2.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • MonoxideTool.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RealBomb.exe
    .exe windows x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • Rensenware.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Spark.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • TEMZ.exe
    .exe windows x86

    13826908a42758ff942be956bb84af74


    Headers

    Imports

    Sections

  • Vbs_To_Exe.exe
    .exe windows x86


    Headers

    Sections

  • VineMEMZ.exe
    .exe windows x86

    b5a014d7eeb4c2042897567e1288a095


    Headers

    Imports

    Sections

  • add_remove.exe
    .exe windows x86


    Headers

    Sections

  • lol.exe
    .exe windows x64

    938e55798d00d64da9a72679bf7f13e0


    Headers

    Imports

    Sections

  • razorVirus_Builder.exe
    .exe windows x86

    027ea80e8125c6dda271246922d4c3b0


    Headers

    Imports

    Sections