General

  • Target

    FnClient.exe

  • Size

    1.6MB

  • MD5

    794aff3545f0ea50584adc40dd2f0896

  • SHA1

    6130d56bf9ba1cbe320f0b24141b0c9491584d3f

  • SHA256

    18888fdc50df5f29587b1c83cb5a217d4837f5fb31b74b010e2337de4b5da988

  • SHA512

    d7d9ca25f7535f10232b715ef5662f7316c512dc7da1036d3a31e77922fcaa30e5066fcf7142c743147e2d9aebdbf778be0390512a6f397c692118d7f11f1239

  • SSDEEP

    12288:ofUX9SOQjN9wr5jpvkP3bap3WUkv9wO4ngeA4EoELzXKlfGba5hvMNGcxzY5Sqax:hAbIfIgJGRg85sPDr/VkJ4UB

Score
10/10

Malware Config

Signatures

  • Chaos Ransomware 1 IoCs
  • Chaos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FnClient.exe
    .exe windows:4 windows x86 arch:x86

    Password: alfred

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections