General
-
Target
0d29a87f9934238c127eefa4f3943e2c1b200d23d95a807446d976f99b451766.exe
-
Size
707KB
-
MD5
f960ae739948d8ab44ce99eae4d53af6
-
SHA1
d63dd3cd3235e0fce198275504926b5adbe9e700
-
SHA256
0d29a87f9934238c127eefa4f3943e2c1b200d23d95a807446d976f99b451766
-
SHA512
92870dafb588533dcaa47d9e8fac0bbfa4cf95e47545e1dde1021b42ec3827380089256d7f8735bec4767765b760aa74e76e2efb3a73964d00bf0f7e961fff3c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118vvnh:6uaTmkZJ+naie5OTamgEoKxLWgnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0d29a87f9934238c127eefa4f3943e2c1b200d23d95a807446d976f99b451766.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections