General
-
Target
a82936dd9a92f77c9611cf8cf43dc6db97e60d5799ad6ec786d4520d76aeef39.exe
-
Size
707KB
-
MD5
d1aee744fc2fb21884c8d022a39efd56
-
SHA1
4e41e55797ff232bbe217e7624ea3905cbdb878a
-
SHA256
a82936dd9a92f77c9611cf8cf43dc6db97e60d5799ad6ec786d4520d76aeef39
-
SHA512
d02818456424106a1930474dde4d61cded5c633f2d65cfdcdd907f3d3f68b7a76ac4701ba14fb734cf332d83fcc19662bc4508a3fb65f842342e9c7a85181a0f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8Uvnh:6uaTmkZJ+naie5OTamgEoKxLWbqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a82936dd9a92f77c9611cf8cf43dc6db97e60d5799ad6ec786d4520d76aeef39.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections