General

  • Target

    241204-kctrtayc9k_pw_infected.zip

  • Size

    176KB

  • MD5

    b491c7b5bb485bd5075045d701ce4f2b

  • SHA1

    4c054bb053ab134989270b514476af4951a0576c

  • SHA256

    f9c4fec8e2c81284647480653b20c97faae25a50f3f2756f6e2b70c8da968d2f

  • SHA512

    5f856acd4a640773f9404ac88093557223a775ef96f8e9c1635bfb74ec0a344423147b07135d86a7776379a3ef154ab04e68d5d0d6bf61a492a4c00fd8ff6b35

  • SSDEEP

    3072:/k7N6kKi8gBxSukhLWMU/JlRn3Iu3F3G1255A2EKJbu9jiYddh1N2TW+O:MhRl88UQFlRn3IoFW1255AuJaBVdRSJO

Score
10/10

Malware Config

Signatures

  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 241204-kctrtayc9k_pw_infected.zip
    .zip

    Password: infected

  • 001152ed2a7d84fa5ee2d85e1740c94512e0bc22e0a500d93bfa8a135aaf46e1
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections