Cash Ransomware uncrypt[.]exe_17185853059[.]zip

General

Target

Cash Ransomware uncrypt.exe_17185853059.zip
Size

2.1MB
MD5

cbdddfd994f6b82803efba783916d652
SHA1

f6c0789bb7c5c75e5468a33ae0361d8e8bafc79d
SHA256

a0c108d966990be9390cd528b2488759b32e537b67e2e5e002f9c97b7612e265
SHA512

392d792a710a9318adae4792ad43d5f0537d49956374f5b54baef1769b89282d1083616b7cef00ee166beea79e55dba60baf0f26cb11f60e5a0bc215be14ad3e
SSDEEP

49152:ty7BF8KQkfDuYZHtHDnyLMZiXL7pL8amE+8YNa7g:0vlQtYZACylJJFUD

Score

7^/10

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
static1/unpack001/8040b684f12ac819ba9ecb407f202f01182d25186552093379ad33c86f3a4273	net_reactor

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8040b684f12ac819ba9ecb407f202f01182d25186552093379ad33c86f3a4273