General

  • Target

    KS_mod.exe

  • Size

    7.9MB

  • MD5

    84264908670a6a844d6f08edc82d7797

  • SHA1

    313126430255b6d53d67ae66235a3e184022e961

  • SHA256

    515d445a531f9e6a46b55b7d91fdfc66bf9d9606151d7cf8ebd52bc5115ebab2

  • SHA512

    f07c10bda71f0bbe814bc818efc7ce1c2fbf729a6604d4a8448870b5957ce8e54b529666bc477b4cb61a62cb716702449a0e4d5bb32bb7c353b879838f86c7cc

  • SSDEEP

    196608:M725ID0pUzPLhQNQm8NkKeUxbAQAtwq+ZkiKDIjx0vxqBPC:lpUTLfhJbxAaq+ZkF0x0JqBP

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KS_mod.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • ransom.pyc