General

  • Target

    2023-08-26_e646162c107d37df2eefe6d6e904a1d7_lockbit_wannacry_xrat_JC.exe

  • Size

    24.2MB

  • MD5

    e646162c107d37df2eefe6d6e904a1d7

  • SHA1

    16225d10934b2cbbe24267c00e5ef8be40c3b8ca

  • SHA256

    a15e0e87e20faefa5dfd9942906009704a93cb95268e8e4e4312959359ec1975

  • SHA512

    3181ecdc6e117dc66db2fe873e34557733663afa5d33492085cd4ce35d7c88e02bff8765b49d71c5fb6585237f994854895f1c4bb2451587eeed2a75a476f21e

  • SSDEEP

    98304:SQBbBWIgWljGxRB/LL6vc22SsaNYfdPBldt6+dBcjHVCU688cIyGOk3ta:p4xRBjgB7j4U6gl

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    1

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_e646162c107d37df2eefe6d6e904a1d7_lockbit_wannacry_xrat_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections