General
-
Target
08d560af2dad8d5aaf29c0c0f592a343f8cb4b9969d9eec9fc27dcd361c2c2b3.exe
-
Size
707KB
-
MD5
6ac864a5814cdfa54c84fbbdc4b148a7
-
SHA1
a58b364d7d91ec4111bf9cee775b2acf56c75130
-
SHA256
08d560af2dad8d5aaf29c0c0f592a343f8cb4b9969d9eec9fc27dcd361c2c2b3
-
SHA512
00a876c5860fe7e3e75a2d05b36e83e6d0d16a9262ce59be7815d290a56cab84c85ca9c80edefe3e4e64a3f5a6c89516e75a84364d7cc553fd34022d536b1b44
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1V8Xvnh:6uaTmkZJ+naie5OTamgEoKxLWo/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
08d560af2dad8d5aaf29c0c0f592a343f8cb4b9969d9eec9fc27dcd361c2c2b3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections