chaos | 7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0[.]7z

General

Target
7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0.7z
Size 10KB
Sample240130-dk835sffb9
SHA256 3efd2229f4413b6656ad0052d133e171a29b36d7aa09961c4600e74d5b1e12bd
MD5 ccca523d3f2f69a769d430feb88b8d28
SHA1 c3bdc47d2a33f4b37a670da1063fff3b98aff2cd
SHA512 49036ee894790b56dbbe63a25a1451f2fb7fc0bbf0dd3d5e9e34f302f3517e2fa7652ce7a30097634d0307f2026d25f691a975dba0058151342f99f26346ac5c
SSDEEP 192:DmGx0iQm4PIwHt5MplnZ3vgz95NfbEEu+b0b7owNgLLXxTdjq7Lntx2oM1S+8Pe+:DmGTqHt5MXZ34JLDEwbrwNg3xpjUZl46
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
static1/unpack001/7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0	family_chaos

Chaos family
chaos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0

File Explorer

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0.7z

.7z 10KB
7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0

.exe 24KB

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0.7z

SHA256 3efd2229f4413b6656ad0052d133e171a29b36d7aa09961c4600e74d5b1e12bd
MD5 ccca523d3f2f69a769d430feb88b8d28
SHA1 c3bdc47d2a33f4b37a670da1063fff3b98aff2cd
SHA512 49036ee894790b56dbbe63a25a1451f2fb7fc0bbf0dd3d5e9e34f302f3517e2fa7652ce7a30097634d0307f2026d25f691a975dba0058151342f99f26346ac5c
SSDEEP 192:DmGx0iQm4PIwHt5MplnZ3vgz95NfbEEu+b0b7owNgLLXxTdjq7Lntx2oM1S+8Pe+:DmGTqHt5MXZ34JLDEwbrwNg3xpjUZl46
MD5 SHA1 SHA512 SSDEEP

Password

infected

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0
MD5 de595119fceaa7540afb57c9494488ea
SHA1 7809f95475ab512d3a12e285d38fcbcb1e272414
SHA512 3a2c66d3f2f9126d78ea8e6cc6d560621cb54a006fcc619129abe7c4850918df0932bf37b21332c05498042cbce3bf5ff745d6dfe9b0bda0c803f2556bd10659
SSDEEP 384:h0JORJEzJOg+ge4DFqctPxMbuOVs91V11+3WA:ZJIJOlW0ct9L1qJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Chaos Ransomware
Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

30622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0.7z

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0.7z

7a3e70ae309a73659d5e5cbee5a719e9d419c3741ba24c1d68edf8ef218868b0

mscoree

dotnet