General
-
Target
82f84f778ec2769d21d55adc13d251b9a5ed1e701387c63dd4aa9946e0156faa.exe
-
Size
707KB
-
MD5
8b088903a495331536ea4433b3073636
-
SHA1
541a8b6e070bf64ae2a0cebd4eac483da56fe191
-
SHA256
82f84f778ec2769d21d55adc13d251b9a5ed1e701387c63dd4aa9946e0156faa
-
SHA512
f633be0a1517287275f87a7b51245fbf1b5e15cdd756a57cce125bc78b9595423a98e26bbe29c6ab2f7712432200ca01021ac40f2e6ec5242cb973aa297d3a66
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8fvnh:6uaTmkZJ+naie5OTamgEoKxLWu3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
82f84f778ec2769d21d55adc13d251b9a5ed1e701387c63dd4aa9946e0156faa.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections