General
-
Target
e1ac6283bd50e46c49ea0cfae49e4a8f
-
Size
40KB
-
Sample
240331-sa6ycsdg9y
-
MD5
e1ac6283bd50e46c49ea0cfae49e4a8f
-
SHA1
e0f4c6caf5e8b119a1b302591a39511872eb11cd
-
SHA256
68ec37ccb2e6682f6f444b13b9d6f0098ef45774dcf856328d7c9af440891679
-
SHA512
ca612f7b82e178feddaa14cdde0a1e25a65e5d1c0868ff39bb4db3447cba909ffa5bb813b8bf5ab038d33d45a7ea95de200cfd59d5cae890507aba8cc7556223
-
SSDEEP
768:UzctJwrPdpe9rrG5XdO1AF97rds0/poHWFC6JORwxIpizMAO2:actJgPW9rrGNdO1AjvWqS246WNizg2
Static task
static1
Behavioral task
behavioral1
Sample
e1ac6283bd50e46c49ea0cfae49e4a8f.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e1ac6283bd50e46c49ea0cfae49e4a8f
-
Size
40KB
-
MD5
e1ac6283bd50e46c49ea0cfae49e4a8f
-
SHA1
e0f4c6caf5e8b119a1b302591a39511872eb11cd
-
SHA256
68ec37ccb2e6682f6f444b13b9d6f0098ef45774dcf856328d7c9af440891679
-
SHA512
ca612f7b82e178feddaa14cdde0a1e25a65e5d1c0868ff39bb4db3447cba909ffa5bb813b8bf5ab038d33d45a7ea95de200cfd59d5cae890507aba8cc7556223
-
SSDEEP
768:UzctJwrPdpe9rrG5XdO1AF97rds0/poHWFC6JORwxIpizMAO2:actJgPW9rrGNdO1AjvWqS246WNizg2
Score10/10-
Chaos Ransomware
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-