General
-
Target
202409123455aac6ef44053e62f6856e0298877fpoetratsnatch
-
Size
4.9MB
-
MD5
3455aac6ef44053e62f6856e0298877f
-
SHA1
c36f7e45d4954aa8471915d153ef23c14d013760
-
SHA256
1c4bf3be6dd7d30e1242ba595232888df2247420a0a5387a543922c3540a99a1
-
SHA512
ee348e40b7b411f18bfd0e10ee8920dc6b63a644291f51ef113b3cd4c26532fc10369032ed24882235cc20c9f2668c6b8691809d6472658fd7c32ae38f61d3c9
-
SSDEEP
49152:3miEQ8pUWSujrb/TKvO90d7HjmAFd4A64nsfJEnFaqHGjp09t5HvnK3nE6Vo73do:1WSHFaqmSfP4YbdPbE6pQQQQQQQQ
Score
10/10
Malware Config
Signatures
-
Rangoware family
-
Rangoware is an opensource ransomware written in golang. 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
202409123455aac6ef44053e62f6856e0298877fpoetratsnatch
f0ea7b7844bbc5bfa9bb32efdcea957c
Headers
Imports
Sections