General
-
Target
08d15741f52a8c00ebbace9d19aacff8448812430d2c3097963dbf6e0b9a2a37.exe
-
Size
707KB
-
MD5
958cd67cb911a0cb4362dda39f87d577
-
SHA1
ed25e41ca83171eae19be03058f06cf26cb9eaa7
-
SHA256
08d15741f52a8c00ebbace9d19aacff8448812430d2c3097963dbf6e0b9a2a37
-
SHA512
8c13a4043c92c597dd8bccbd8a2421d7c892051fd03f20c6d52e30684ae22becfac24d56b14ff7622537da4bbdbc0e93bcc2b9edec6400ee62c895c75dbc6c15
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138cvnh:6uaTmkZJ+naie5OTamgEoKxLWeCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
08d15741f52a8c00ebbace9d19aacff8448812430d2c3097963dbf6e0b9a2a37.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections