Overview

overview

10

Static

static

10

34371c7833...a2.exe

windows7-x64

10

34371c7833...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34371c7833c38fa441316f238961d9a2.bin

  • Size

    978KB

  • MD5

    34371c7833c38fa441316f238961d9a2

  • SHA1

    74e99094f77642ef2d803188121a9c61e73139fe

  • SHA256

    444b77c224199fbcb8e1241f999ea02b68e5cee7d74f262c160ae45d85cf1105

  • SHA512

    aba20341168f6f78cecb302c1544ad617a6dc4d5e081cb3ffbcfe0e67c9a5708ce7e9d264de78eb620c3acea19cf37789f25a48dbb080ed16542ccc4b780386a

  • SSDEEP

    24576:VoyOrimyU/MAYycTwgadEhiU8BnM4XkEJ:CNyU/LYyQwdU8RkE

Score
10/10
upxzebrocyekans

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
    ekans
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
    zebrocy
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 34371c7833c38fa441316f238961d9a2.bin
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections