General

  • Target
    2024-08-08_a056fb0fae01905d78e4aa610e239962_bkransomware_floxif
  • Size 2.3MB
  • Sample240808-ps1yaaxcjg
  • SHA256 6c0f9f93e0d6aedfe9a47148d9d44865bb339199e67732afc091d967f3b920f8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family

File Explorer

  • 2024-08-08_a056fb0fae01905d78e4aa610e239962_bkransomware_floxif
    .exe 2.3MB

2024-08-08_a056fb0fae01905d78e4aa610e239962_bkransomware_floxif

  • IMPHASH 50882f74b4f0dd7dfa5a258b949d77b9
  • SHA256 6c0f9f93e0d6aedfe9a47148d9d44865bb339199e67732afc091d967f3b920f8
  • MD5 SHA1 SHA512 SSDEEP
  • Detects Strela Stealer payload

PE Signature issue

Digest
74:25:7f:a0:b3:0c:5c:72:08:74:04:99:75:28:81:74:06:49:93:72:c7:78:68:88:29:cf:31:a0:d1:da:6f:01
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Canon Inc.,OU=Inkjet System Development Center,O=Canon Inc.,L=Kawasaki-shi,ST=Kanagawa,C=JP

PE Signature issue

Digest
44:b8:89:1e:cb:79:42:ae:de:81:f2:d9:cf:7d:87:41:df:86:9e:61
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Canon Inc.,OU=Inkjet System Development Center,O=Canon Inc.,L=Kawasaki-shi,ST=Kanagawa,C=JP
Chains

Mar 2, 2017

Minor OS version
1
Major OS version
5
Entry point
1211938
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Jenkins\workspace\ScanUtility_Win_17_2H_1.4.0_Build\Source\FrontEnd\Release\ScanUtility.pdb