General
-
Target
setup.exe
-
Size
3.5MB
-
MD5
b91097bff5f741a965eb80edfcc97b0b
-
SHA1
fdebe47b69442a312c1008c7a5ee71b3f41b4a68
-
SHA256
de4da24486f406177afea313e60468918398dbbdb3551a7290a4050966494728
-
SHA512
21b96d15a463a5cdc7e2016a8a1e1cf636b1c4d13343f66fdcad24deecba56a29797600701ac3a382133ca585c89eb81fab085853991c19ccf245ff11de91514
-
SSDEEP
49152:JAdGB73ejP3+EMfRdASVaAvrC5Xh602+:JAgR3epMjASHch
Score
10/10
Malware Config
Signatures
-
Ekans Ransomware 1 IoCs
Executable looks like Ekans ICS ransomware sample.
-
Ekans family
-
Zebrocy Go Variant 1 IoCs
-
Zebrocy family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
setup.exe
Headers
Sections