General

  • Target

    rundll3.exe

  • Size

    5.6MB

  • MD5

    be8e765b8622989c5e4aa6414c2b030c

  • SHA1

    b6cb7f1ffcceff8fbe572594ffc6aa515420e0a0

  • SHA256

    6fdb160c3b7a5813f187afd606ef2e24cfde0e66e3a0663ce65cd1372fdc32ab

  • SHA512

    e0522301c8d2c156fe6157d7d1ca3a305078ed35bd3a2cf1131bea2a97246eaa8e00751cb4ad9c63e26d97149bdf5898da6d443d8c224735c81589462bd571ad

  • SSDEEP

    49152:YfPM6fbpCpuj2TCOHIiRO06E6M5UqdJtunHnVnzm5EatXXzihWGNggHL/rF2tZVb:GpRY2IEfm

Score
10/10

Malware Config

Signatures

  • Detects Windows variants of RansomHub Ransomware 1 IoCs
  • Ransomhub family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rundll3.exe
    .exe windows:6 windows x64 arch:x64

    Password: 001372024d66

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections