General

  • Target

    2024-03-09_c54566c34316dbefd0d344311b24a766_ransomlock

  • Size

    1.3MB

  • MD5

    c54566c34316dbefd0d344311b24a766

  • SHA1

    2bf940e1a7773ba76a55a32be936fa513eeb9b34

  • SHA256

    aac15814aec66587435c8e2abc6431ba09300e94de72ae94a8b60f6efad0876b

  • SHA512

    76939f6cf240d31022961d338995567584c067447356dd01f77689e253c5c1e0514038b8bba6b8ef91a4f79357bccb96632e3e5e5b03adb21ee8c6ea60d01e20

  • SSDEEP

    24576:DwxPanDWDAxfy+t4g6cBLi2iYQOlbBTAIUC:8xPpWTjPJplVTjUC

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_c54566c34316dbefd0d344311b24a766_ransomlock
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections