ransomware_test sample[.]zip

Resubmissions

26/03/2024, 03:19

240326-dvb66afc8t10

25/03/2024, 15:36

240325-s16ehseg3110

20/03/2024, 15:19

240320-sqh68sbe8310

Sharing

Copy URL Twitter E-mail

General

Target
ransomware_test sample.zip
Size 367KB
Sample240326-dvb66afc8t
SHA256 0c9eaf91a5624009915eea03744066948358d5a697a999ed3ba4d615d44da276
MD5 6e512621c83d14077a27fb67945eb18d
SHA1 4c33d891fe0845a89542d165eceecd3bb5b2a269
SHA512 53153a21b93ac9798beaec34573a4364e2b335f26e1e307aef6b7d087a829fb044097d3076632cd93a12df5a0ed5d2991a94fa75808189530de5b8e3daad014e
SSDEEP 6144:yWIOZUcGqxaULmYfbdnzTIBgXiQkCne7Y2y8G5SqrMnTg9p2zI/itZ20x3E:5ZUrabNIBQW28d+Az/Xx3E
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ransomware_test sample. bin

File Explorer

ransomware_test sample.zip

.zip 367KB
ransomware_test sample. bin

.exe 959KB

ransomware_test sample.zip

SHA256 0c9eaf91a5624009915eea03744066948358d5a697a999ed3ba4d615d44da276
MD5 6e512621c83d14077a27fb67945eb18d
SHA1 4c33d891fe0845a89542d165eceecd3bb5b2a269
SHA512 53153a21b93ac9798beaec34573a4364e2b335f26e1e307aef6b7d087a829fb044097d3076632cd93a12df5a0ed5d2991a94fa75808189530de5b8e3daad014e
SSDEEP 6144:yWIOZUcGqxaULmYfbdnzTIBgXiQkCne7Y2y8G5SqrMnTg9p2zI/itZ20x3E:5ZUrabNIBQW28d+Az/Xx3E
MD5 SHA1 SHA512 SSDEEP

Password

asd123!@#

ransomware_test sample. bin

IMPHASH 216df81b1ef7bc2aa8ec52bbeef137c9
SHA256 0545f842ca2eb77bcac0fd17d6d0a8c607d7dbc8669709f3096e5c1828e1c049
MD5 6fc418ce9b5306b4fd97f815cc9830e5
SHA1 95838a8beb04cfe6f1ded5ecbd00bf6cf97cd564
SHA512 7b9e17dc75d83f6b6ac458f29e07faf30e50d88d283cb50fd64b44730622da48702059e416649455c082ff28328fd70e3acea61527e86a7972978219a7bfcc06
SSDEEP 24576:uLjr3s2nScu1i1tz3f++5kRzFxk7rMxNeR1R9qpdLF:Ujrc2So1Ff+B3k796l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asd123!@#

Minor OS version

Major OS version

Entry point

786320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ransomware_test sample.zip

ransomware_test sample. bin

shlwapi

activeds

kernel32

advapi32

ole32

generic