General
-
Target
f69948376.dll
-
Size
952KB
-
MD5
f931e1526e6923380228fcfd6c36a504
-
SHA1
5fa2b10084e385307cd37ff7c8b466d99dd9564a
-
SHA256
25a9c5e4ef11cc802ff7a1918e8cac7f828d0158fb560d703d16cbb57cfe6b85
-
SHA512
bc8764ab9a9a0df61da15253442fa4ceaf83c5e513aeac0c1f1542b90f310a9f9e80b6be89a8eab29c04d2600038193a04dbee7816038d653f2de6da56a388b0
-
SSDEEP
6144:3P4DNessKBJa0jZSJZNmTgEjGPRgKiyUyH+rdyGwHyS4yDtjOGJHnCMLfTptkZ7R:3PScKB4JXNRcr1cA8pFMZjLmp/hOKIXF
Score
10/10
Malware Config
Signatures
-
Detected LegionLocker ransomware 1 IoCs
Sample contains strings associated with the LegionLocker family.
-
Legionlocker family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f69948376.dll
Headers
Sections