netwalker | 2025-12-10_d9abd9afa2135f84a362485743c61465_babuk_elex_mailto

General

Target
2025-12-10_d9abd9afa2135f84a362485743c61465_babuk_elex_mailto
Size 95KB
Sample251210-fy3vdstrd1
SHA256 ec338b1578293293bfb0d0eae474944b0b3d0327a9808a24cab1e7b55941ee07
MD5 d9abd9afa2135f84a362485743c61465
SHA1 70622b7d7870793707d0808ac9099ad74a20e918
SHA512 dfaa3232c76b18cf9af8224ceee19c4225f5018b79de8c27e59091dec3e25ed7c7708c7fd9b59ae46033b74e8cb8734e249667b47c37c006bce354561cf6c6a7
SSDEEP 1536:EQVlTMBPQRhNs3POdM0ty2XGe0W7Pbk3sPkOu/Y8fGcNvgaN:EQ3gBPAC/YM0tyAGe0WDPx9cNvg8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

netwalker

Detected Netwalker Ransomware 1 IoCs

Detected unpacked Netwalker executable.

resource	yara_rule
sample	netwalker_ransomware

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-12-10_d9abd9afa2135f84a362485743c61465_babuk_elex_mailto

IMPHASH e82dd51b077167be63c004bed23d0c1e
SHA256 ec338b1578293293bfb0d0eae474944b0b3d0327a9808a24cab1e7b55941ee07
MD5 d9abd9afa2135f84a362485743c61465
SHA1 70622b7d7870793707d0808ac9099ad74a20e918
SHA512 dfaa3232c76b18cf9af8224ceee19c4225f5018b79de8c27e59091dec3e25ed7c7708c7fd9b59ae46033b74e8cb8734e249667b47c37c006bce354561cf6c6a7
SSDEEP 1536:EQVlTMBPQRhNs3POdM0ty2XGe0W7Pbk3sPkOu/Y8fGcNvgaN:EQ3gBPAC/YM0tyAGe0WDPx9cNvg8
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

6

Entry point

74064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths