Behavioral task
behavioral1
Sample
2024-09-24_265d166689b5f36cbfe6ecae5c5bfac5_get2_snake.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-24_265d166689b5f36cbfe6ecae5c5bfac5_get2_snake.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-24_265d166689b5f36cbfe6ecae5c5bfac5_get2_snake
-
Size
2.8MB
-
MD5
265d166689b5f36cbfe6ecae5c5bfac5
-
SHA1
95dd3e237f00dc8bdcac4b3d3f1352d3b251f647
-
SHA256
9b4fe1c0e1dd0aac8cb176500766c53c43ee2fbe87cbb158c050127d5e1b6b22
-
SHA512
b662fe6aa620f8f7a83732ba70b86ce30023555d53658e61228e43252cb3edd905b472223df3fd827ff12d1dc36390cf3187ffc32aaeb988883179f406feb04a
-
SSDEEP
24576:vv8Hu2+J313ZaHxKX3HjdDjbNxDVpDOysXlo9bB8ky6uOLt:vv8dK/aHYX3x/SysXloD7t
Malware Config
Signatures
-
Detected LegionLocker ransomware 1 IoCs
Sample contains strings associated with the LegionLocker family.
resource yara_rule sample family_legionlocker -
Legionlocker family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-24_265d166689b5f36cbfe6ecae5c5bfac5_get2_snake
Files
-
2024-09-24_265d166689b5f36cbfe6ecae5c5bfac5_get2_snake.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ