General
-
Target
08b3d54f068a3867de5af67c294a2245040c2d8ebecfd67a61faf8e4e2fe5b23.exe
-
Size
707KB
-
MD5
1ea9a75f99a4b63a285c030270b6ed77
-
SHA1
563fdb31a6a9224665eeb232b99b7dc85c1198e4
-
SHA256
08b3d54f068a3867de5af67c294a2245040c2d8ebecfd67a61faf8e4e2fe5b23
-
SHA512
dd58f53368c944139ee12b6dd4eb7f20531794e7fc9a21e0bffa9e00fd84576d3a8f9e23fe998ce642c2adec36f9a6947587343f54ab1a6e36619540ac2bf0d7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8gvnh:6uaTmkZJ+naie5OTamgEoKxLW8+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
08b3d54f068a3867de5af67c294a2245040c2d8ebecfd67a61faf8e4e2fe5b23.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections