General

  • Target

    RansomwareRemover.exe

  • Size

    208KB

  • MD5

    dde985b55fbc4c1492a6f5d559d39833

  • SHA1

    b5e3e40886d1034ac80a3f735cdf8526edbed07c

  • SHA256

    19a69050eb3cc588ddb9ce1ab1e2a520363d14e0e6b590dafb591402e5003933

  • SHA512

    fd9368df49e464391a5484454b140e068d0d4f503f781697d7d8633cb97103ca49cb8e51cfa490d0885327b1e7576c0596a58a3cc421181c6f36f9cf99e90628

  • SSDEEP

    3072:CMSncRzAOQ5MSSH2FFS9BBOsOfvgSlqGS9m3xQyKNbWNV3qmyBeurv:xSncRl0MSSWbS9B9m3xQyObW3qm

Score
10/10

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RansomwareRemover.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections