General
-
Target
9f8c431c24f497f60dcbc41f18e4a8f8f9b265b10b4faae484fbdb54b8ddec5c.exe
-
Size
707KB
-
MD5
73dd9429e6c3e62c4d51be9fac311107
-
SHA1
e748e6eae9d20be5eeb2506ff020306268eec8d5
-
SHA256
9f8c431c24f497f60dcbc41f18e4a8f8f9b265b10b4faae484fbdb54b8ddec5c
-
SHA512
adf8b602c43a2e82beccf82a9c17135700e7bcc29963c1ffe48f663fa3e47620239dd780927a9935dce73b704fb89d8e0681d0627eb307bc93f8ae143e743ac8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8zvnh:6uaTmkZJ+naie5OTamgEoKxLW9zh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9f8c431c24f497f60dcbc41f18e4a8f8f9b265b10b4faae484fbdb54b8ddec5c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections