3e90705aba37a41167ba16227f849865f2fa8f75002f955c681ec40543da7bf1
- SHA256 3e90705aba37a41167ba16227f849865f2fa8f75002f955c681ec40543da7bf1
Behavioral task
behavioral1
Sample
ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe
Resource
win10v2004-20240412-en
Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.
| resource | yara_rule |
|---|---|
| static1/unpack001/ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe | win_industroyer_w3 |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/ea16cb89129ab062843c84f6c6661750f18592b051549b265aaf834e100cd6fc.exe |
Industroyer IEC-104 Module
Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=261, version=25810,
count=3, id=259, version=25810,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=59, id=1, productName=Unmarked objects,
count=13, id=265, version=25835,
count=1, id=258, productName=VS2017 v15.5.6 build 25835, version=25835,