General

  • Target

    2024-05-09_67680dbf09282179b8cae7b0225c28d4_andromeda_china-chopper_snake_wannacry_wannacryptor

  • Size

    4.0MB

  • MD5

    67680dbf09282179b8cae7b0225c28d4

  • SHA1

    401fecb73ae75dd2aba2aa15ff3ac270ef091105

  • SHA256

    32250b0df7e294a512c495aa5505c2297fe92531a9c2d4bd68257f2ace81c40d

  • SHA512

    1e779ee08cc984adfe952804b5d5339d14f8eddcdd1eb21398ea79ec2288ea6c90a2b1ea3be0479a5a9c8ee75a4b930e9ed8c863bf1bef62d9698792e60c8492

  • SSDEEP

    49152:cNWHsVgldwL2uh241mbs/DZWTge2Z65Nv66:cN9Vo4MsgTH5k6

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables packed with Dotfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_67680dbf09282179b8cae7b0225c28d4_andromeda_china-chopper_snake_wannacry_wannacryptor
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections