General

  • Target

    2ee6dfbfb2afd7442c9f2212eb142876698851c3ffb552ee420c0281e35a836e

  • Size

    4.9MB

  • MD5

    b2306ae0dcd36a0d84f954825178d594

  • SHA1

    68f1e3ce4782a242cfcc4fee968b150a3f208bf7

  • SHA256

    2ee6dfbfb2afd7442c9f2212eb142876698851c3ffb552ee420c0281e35a836e

  • SHA512

    4b6826642012c285eb10f530fd490ac4a118cf6a79b05c169936dda90568cace35829a6923da87222d11d7fe03b2cc10a347b9b93e67c6d6e4acb1d54628bf5d

  • SSDEEP

    98304:w3StAYjEtOdVEfrmNNTC2zM9yklTIh5DBWM2UPXY+3C:w3St3dRNUj9rlgeMK

Score
10/10

Malware Config

Signatures

  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ee6dfbfb2afd7442c9f2212eb142876698851c3ffb552ee420c0281e35a836e
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections