General
-
Target
098cb5317e4076cc39e223d9610ff9bb942ac26aac380efac7133fc28ec0b08c.exe
-
Size
707KB
-
MD5
3e0aecb7cd4b45d26165573fb6cae94a
-
SHA1
0b5b22968a468bd6df1742fc32f670a8358cdb65
-
SHA256
098cb5317e4076cc39e223d9610ff9bb942ac26aac380efac7133fc28ec0b08c
-
SHA512
9f20e51d9745abaa448b53a5086dafa778d5e80e4bf9e1a62c4289a192a8ea0e63a35b30a4a6451a56629fa99d0b308d86e4a515ef4b19dbc0f55775ae734913
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWjOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
098cb5317e4076cc39e223d9610ff9bb942ac26aac380efac7133fc28ec0b08c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections