General
-
Target
0af9f0fbf0fab86a5996db1c42b7481ee44ab14646824f3abf89966a75b29ecd.exe
-
Size
707KB
-
MD5
4315294f2592856dad8560f5a999a9a4
-
SHA1
6e57346a454196cb41f7c0a16436d3337ed4a0ef
-
SHA256
0af9f0fbf0fab86a5996db1c42b7481ee44ab14646824f3abf89966a75b29ecd
-
SHA512
83a6a7215641b16844347678ffae5fd22b6060c89ad538719001e43cb14929680b1d24e897a3f30577782011d36fc511afaae1afb93166ca3480ffa884e6fef1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s8cvnh:6uaTmkZJ+naie5OTamgEoKxLW3Ch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0af9f0fbf0fab86a5996db1c42b7481ee44ab14646824f3abf89966a75b29ecd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections