General

  • Target

    6df64a0a921bd65006968d7eb146f7ceb60ffc1345575d39edec0eded41eb4fe.exe

  • Size

    6.0MB

  • MD5

    7f97b34a113170d02ff8008c2bbc7745

  • SHA1

    fe00b8cfc0896d6d23ff3628af8c406a7683d707

  • SHA256

    6df64a0a921bd65006968d7eb146f7ceb60ffc1345575d39edec0eded41eb4fe

  • SHA512

    a899eb8481c02d0c983c7761ca9962ffdea22354cdef6cefeadbdf0ac96d43a54c02ea72e89b8b5c2bdefed38ecdd960a8d267e3fc15545286844baf40ac9e93

  • SSDEEP

    49152:LwLwHt4Ihqew+96PoBjYs5ngToDEZwTFgN+1TtI1VjFF3PBTqJQkYUjeAb3WUpPb:L9fhqezRobVjFyEUqA6Sp+ZIogCxfwis

Malware Config

Signatures

  • Blackcat family
  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Detected LegionLocker ransomware 1 IoCs

    Sample contains strings associated with the LegionLocker family.

  • Legionlocker family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6df64a0a921bd65006968d7eb146f7ceb60ffc1345575d39edec0eded41eb4fe.exe
    .exe windows:5 windows x86

    bcb64e67818079866efdc97c2da83d74


    Headers

    Imports

    Sections