General

  • Target

    setup.exe

  • Size

    3.5MB

  • MD5

    b91097bff5f741a965eb80edfcc97b0b

  • SHA1

    fdebe47b69442a312c1008c7a5ee71b3f41b4a68

  • SHA256

    de4da24486f406177afea313e60468918398dbbdb3551a7290a4050966494728

  • SHA512

    21b96d15a463a5cdc7e2016a8a1e1cf636b1c4d13343f66fdcad24deecba56a29797600701ac3a382133ca585c89eb81fab085853991c19ccf245ff11de91514

  • SSDEEP

    49152:JAdGB73ejP3+EMfRdASVaAvrC5Xh602+:JAgR3epMjASHch

Score
10/10

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections