General

  • Target
    1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e.exe
  • Size 14.9MB
  • Sample231018-pcmeysec81
  • SHA256 1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Blackcat family
  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Detect MafiaWare666 ransomware 1 IoCs
  • Detect Maui ransomware 1 IoCs
  • Mafiaware666 family
  • Maui family
  • Njrat family
  • Venus Ransomware 1 IoCs
  • Venus family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e.exe
    .exe 14.9MB

1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e.exe

  • IMPHASH aa466c044f0d2d2f6270070fe1bddf7b
  • SHA256 1fd42d07b4be99e0e503c0ed5af2274312be1b03e01b54a6d89c0eef04257d6e
  • MD5 SHA1 SHA512 SSDEEP
  • Chaos Ransomware

  • Detect MafiaWare666 ransomware

  • Detect Maui ransomware

  • Venus Ransomware

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
2
Major OS version
5
Entry point
57804
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths