General

  • Target

    49d828087ca77abc8d3ac2e4719719ca48578b265bbb632a1a7a36560ec47f2d

  • Size

    389KB

  • MD5

    ba95a2f1f1f39a24687ebe3a7a7f7295

  • SHA1

    b4da6af343b27594fee7109a02ef699ba52f6e46

  • SHA256

    49d828087ca77abc8d3ac2e4719719ca48578b265bbb632a1a7a36560ec47f2d

  • SHA512

    4611ac65840c3ecee27f8821705f378de09ddbf1130476517f857abf3b1cf0f169ca618c82cc905d56f224019dbb01795ca458453a64cc51e100f7bbfc2781ee

  • SSDEEP

    6144:SKmb+LOzyGKPCVqlea2MqxOnsAOK1RUa+jE6S3qVFvxTn:SfaLQyGK6kAa2XgsA1RUa+jE6S3qRT

Score
10/10

Malware Config

Signatures

  • Detects Yanluowang ransomware 1 IoCs
  • Yanluowang family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49d828087ca77abc8d3ac2e4719719ca48578b265bbb632a1a7a36560ec47f2d
    .exe windows:5 windows x86 arch:x86

    380467bc2cc16b8ce64d4802632fe491


    Headers

    Imports

    Sections