General

  • Target

    7bbaf207645c2e83d3538bbf79f01098

  • Size

    3.6MB

  • MD5

    7bbaf207645c2e83d3538bbf79f01098

  • SHA1

    92ba1c6b63fa7012230e37a69d05c336280af447

  • SHA256

    deb538fe7b7534a808acece2756a79296ee82f81d4acb1d1697f099da5cee136

  • SHA512

    825818695fa429cba13198265fd46337766c003eeb7762a41941a208808078820c1cd08192fc6427a58e5250bab0438b01a80915540c46d0e8353ce4b23f23cc

  • SSDEEP

    49152:zAdGB73ejP3+EMfRdASVaAvrN5Xh602+s:zAgR3epMjASHPhK

Score
10/10

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7bbaf207645c2e83d3538bbf79f01098
    .exe windows:4 windows x86 arch:x86

    96c44fa1eee2c4e9b9e77d7bf42d59e6


    Headers

    Imports

    Sections