Trojan[.]Ransom[.]Covid-666 (1)[.]exe

General

Target
Trojan.Ransom.Covid-666 (1).exe
Size 687KB
Sample260707-khtc8sa15q
SHA256 1eefaeb98524277d1aeb459b6e4a31472ce2f4ff15f8f45b051e1c8a021c8fa7
MD5 0c303ae1347c0395a96f3eb38d26d7ed
SHA1 c8cf473a22fc86ddad00ec286e94422f4b7d5c59
SHA512 57e9ca4e5339164a6c3e5f53b8f30410d86139355390e17a2926d5b2263a511f0d47b26f70e95a5cf8daf4c365fec7f057614636e6f092d8320fcdda8debea93
SSDEEP 12288:U7M23cFQpIn5tghlAjyCey1vLd31utolsqHzc30qOocuXi7oS:Ug2sq2nohlAtrvLjutQtI3bOoli
TLSH
T1D1E4F1A2C565E129D59C2BF94D99BF4F1CD30D0B1B83B739B72028645E92B37362ED20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trojan.Ransom.Covid-666 (1).exe

SHA256 1eefaeb98524277d1aeb459b6e4a31472ce2f4ff15f8f45b051e1c8a021c8fa7
MD5 0c303ae1347c0395a96f3eb38d26d7ed
SHA1 c8cf473a22fc86ddad00ec286e94422f4b7d5c59
SHA512 57e9ca4e5339164a6c3e5f53b8f30410d86139355390e17a2926d5b2263a511f0d47b26f70e95a5cf8daf4c365fec7f057614636e6f092d8320fcdda8debea93
SSDEEP 12288:U7M23cFQpIn5tghlAjyCey1vLd31utolsqHzc30qOocuXi7oS:Ug2sq2nohlAtrvLjutQtI3bOoli
TLSH
T1D1E4F1A2C565E129D59C2BF94D99BF4F1CD30D0B1B83B739B72028645E92B37362ED20
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2342352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths