Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    539313827a01fafcedf781de9d8503f6cfaa1cc62695725f16f150b3d74386b4.exe

  • Size

    332KB

  • MD5

    127244dc608747be9603c663bea8081d

  • SHA1

    fcb2d9457f65f216c735af0d236ffec4ae1dbc36

  • SHA256

    539313827a01fafcedf781de9d8503f6cfaa1cc62695725f16f150b3d74386b4

  • SHA512

    854241bf0344dcc029462df0d5e87deb1ac54c04ff04488bf392acf25b2742356fc5c7992e8961ba8675e779ab4ff029faf891d4fc893e4b8c70c29f76d88c0e

  • SSDEEP

    6144:fbYrGZdOwWwhMDCGcHHA4DeeG7onjX0pya0UprB8Z:zYmpTGcA4VQyCv8Z

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects file containing reversed ASEP Autorun registry keys 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 539313827a01fafcedf781de9d8503f6cfaa1cc62695725f16f150b3d74386b4.exe
    .sys windows:10 windows x64 arch:x64


    Headers

    Sections