General
-
Target
09cdabdf29bf08adbd8fa1d082ed0f0cac2f710001061f4d61da0f042160fa9f.exe
-
Size
707KB
-
MD5
c23ab183baf1c86fef91397c7f3588dc
-
SHA1
9f1c83f6f3d302a5c25a6f1de626f5c75b70e212
-
SHA256
09cdabdf29bf08adbd8fa1d082ed0f0cac2f710001061f4d61da0f042160fa9f
-
SHA512
669f12a6b03acaaf3ab1fa8ecfbf4ab4bfe875fb6d5af291a56f940601a65dbcc8f4551eb3cffb416f1fa82f9d05fff9a5f27f5d15252fe298398f0abef7a301
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8Rvnh:6uaTmkZJ+naie5OTamgEoKxLWzFh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
09cdabdf29bf08adbd8fa1d082ed0f0cac2f710001061f4d61da0f042160fa9f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections