General

  • Target

    HEUR-Trojan-Ransom.Win32.Phobos.vho-a4c7517fe4548f71f2f2e6848100d638c3bd7d03fa225ca598a03824b7575fd1.7z

  • Size

    35KB

  • MD5

    8e6f83b06c6c010293b8b798102bed1f

  • SHA1

    1c84da8f9bd35cc60bb0e826cf312ba9c7c372b4

  • SHA256

    27aebbda43b8e6e72b1f305b912ca4a506401d9462baf60bc30ce35852984f70

  • SHA512

    9aae2d3e1f54add6bda63828dfbc48d6ad85f0e31345e3638d47715dab9b84df4b4f6e187f8578d40c6af78738db37857bf15ffbe7c7895d2cac1aae028f9f25

  • SSDEEP

    768:1Upgmy0MS3BZYdStnK6gBZ918LXT9spwzcwR2NcmbFimd9SLFYnbzkgwKU5dIBHx:1UimBuu/gB0JsBzNcOj9SLF1f1St

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Ransom.Win32.Phobos.vho-a4c7517fe4548f71f2f2e6848100d638c3bd7d03fa225ca598a03824b7575fd1.7z
    .7z

    Password: infected

  • HEUR-Trojan-Ransom.Win32.Phobos.vho-a4c7517fe4548f71f2f2e6848100d638c3bd7d03fa225ca598a03824b7575fd1.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    851a0ba8fbb71710075bdfe6dcef92eb


    Headers

    Imports

    Sections