General
-
Target
9e6b606fc91268d07a41e23a43e4990b0f9e0af187563a4cc6f0b38c689925e0.exe
-
Size
707KB
-
MD5
67ea0d5ad1ceb9b8bf57fd081524b430
-
SHA1
89b2ee24915c291dcb346a024c0d41e82d7eaa31
-
SHA256
9e6b606fc91268d07a41e23a43e4990b0f9e0af187563a4cc6f0b38c689925e0
-
SHA512
f6f1c717baa0e686988da4bd53b84f5c3ac7571c92245caa5422691f15667bf2fc0289a9bfa21c867dc2458f57f91eb2bc4eda14b3c684525b5f27f05f89ec98
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108cvnh:6uaTmkZJ+naie5OTamgEoKxLWXCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9e6b606fc91268d07a41e23a43e4990b0f9e0af187563a4cc6f0b38c689925e0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections