General
-
Target
128ee9dad2838caa7fb82d430a218e9260299b1a2058de2a5bc8608a750d494d.exe
-
Size
707KB
-
MD5
a39c2454d86f64de3a36ce8d707a1e13
-
SHA1
b82e7c50d4bbc47d7d2824da70b0752856627e8f
-
SHA256
128ee9dad2838caa7fb82d430a218e9260299b1a2058de2a5bc8608a750d494d
-
SHA512
dc505e8ac1f942f93d1ad69301d89cd28f88a891b9e3f4efe89dd32d14dc7d0515c18345beee8ae980792637e06b5231d911b216e1547c687628f53b7041effe
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8yvnh:6uaTmkZJ+naie5OTamgEoKxLWGch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
128ee9dad2838caa7fb82d430a218e9260299b1a2058de2a5bc8608a750d494d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections