Overview

overview

10

Static

static

10

cdb98dd247...01.exe

windows7-x64

3

cdb98dd247...01.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdb98dd2476e88aa64ae9eaaf620fe01

  • Size

    3.6MB

  • MD5

    cdb98dd2476e88aa64ae9eaaf620fe01

  • SHA1

    5fc5981b9fe0551bcfa9e829ebbbbdc62729ef9c

  • SHA256

    66d013b6fa644e65465e52c644ab7d183fad81239149169e844615240f14c79b

  • SHA512

    618b7cf9e4f04f3b992d4d919fb7cbec2e085edf6610d94c6b981f51df3f6454e39f2d24010d3be2db5fb193a37154bc7372e96bc4bf87e29c062e946bc829a7

  • SSDEEP

    49152:zAdGB73ejP3+EMfRdASVaAvrN5Xh602+/:zAgR3epMjASHPht

Score
10/10
zebrocyekans

Malware Config

Signatures

  • Ekans Ransomware 1 IoCs

    Executable looks like Ekans ICS ransomware sample.

  • Ekans family
    ekans
  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
    zebrocy
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdb98dd2476e88aa64ae9eaaf620fe01
    .exe windows:4 windows x86 arch:x86

    96c44fa1eee2c4e9b9e77d7bf42d59e6


    Headers

    Imports

    Sections