General
-
Target
8510f0224cf9a06bccf1e0989b287ba97499506dab7b99672d98626fef7e9eed.exe
-
Size
707KB
-
MD5
da6a054a5e7374eba691d5319f8c63a4
-
SHA1
027f80bfce3daf53e8d4976018c318eb062e634d
-
SHA256
8510f0224cf9a06bccf1e0989b287ba97499506dab7b99672d98626fef7e9eed
-
SHA512
ac8eb40689afdbdad806c405a6b751e2887eb5ef06e5c8323d40a360c82086c07dd1470d5f5969535691f1fe035d81d8295692278b974c6f14fb128a33b70b28
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8rvnh:6uaTmkZJ+naie5OTamgEoKxLWv7h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8510f0224cf9a06bccf1e0989b287ba97499506dab7b99672d98626fef7e9eed.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections