General
-
Target
8aa6bf2add3f9ea3a96863e4c4ea0cfe933b2aec47f68e50d35f51c66891b3cc.exe
-
Size
707KB
-
MD5
c8b5f8e3ab4f9f00ad53fcad1656a166
-
SHA1
0acf85cf9c923db3eac0977629c90b4a0b6024b4
-
SHA256
8aa6bf2add3f9ea3a96863e4c4ea0cfe933b2aec47f68e50d35f51c66891b3cc
-
SHA512
983e176e34b6720f740fd538b90ee83c8be557e0950c737242e6efaeb187fce3d16d48c375dec613dbd6d49ee68c1fc6e43b4dbb8583bd69648609934ce17e32
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8lvnh:6uaTmkZJ+naie5OTamgEoKxLWFBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8aa6bf2add3f9ea3a96863e4c4ea0cfe933b2aec47f68e50d35f51c66891b3cc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections