General
-
Target
09dfa5218534a0af34bdb4213550f361ba20b448aa6c3ad5f9e645b674ba797a.exe
-
Size
707KB
-
MD5
78af4485db52f72da9f96918b3f657bd
-
SHA1
8ca6ef809035fd1fbd905a92f246c0f38899ef78
-
SHA256
09dfa5218534a0af34bdb4213550f361ba20b448aa6c3ad5f9e645b674ba797a
-
SHA512
c2d78e30aca8d83309b68d10539df53e8a984202390a6edb7359c076192d4e39d8915d27f5053b49f497e5a59bef9fd91e617c100a2e1d7e3bcc32b955606b74
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8ivnh:6uaTmkZJ+naie5OTamgEoKxLWDsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
09dfa5218534a0af34bdb4213550f361ba20b448aa6c3ad5f9e645b674ba797a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections