Overview

overview

10

Static

static

10

34371c7833...a2.exe

windows7-x64

10

34371c7833...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34371c7833c38fa441316f238961d9a2.bin

  • Size

    978KB

  • MD5

    34371c7833c38fa441316f238961d9a2

  • SHA1

    74e99094f77642ef2d803188121a9c61e73139fe

  • SHA256

    444b77c224199fbcb8e1241f999ea02b68e5cee7d74f262c160ae45d85cf1105

  • SHA512

    aba20341168f6f78cecb302c1544ad617a6dc4d5e081cb3ffbcfe0e67c9a5708ce7e9d264de78eb620c3acea19cf37789f25a48dbb080ed16542ccc4b780386a

  • SSDEEP

    24576:VoyOrimyU/MAYycTwgadEhiU8BnM4XkEJ:CNyU/LYyQwdU8RkE

Score
10/10
upxzebrocyekans

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
    ekans
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
    zebrocy
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 34371c7833c38fa441316f238961d9a2.bin
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.