General
-
Target
838fb14565902acf63075f6661ffb3999edc72474601fc13a078149be39766ef.exe
-
Size
707KB
-
MD5
85bb0aa625748b1e3bfd692f0c8c6fd3
-
SHA1
cf87d8e0feac6924916dd855cfbcc876cc191146
-
SHA256
838fb14565902acf63075f6661ffb3999edc72474601fc13a078149be39766ef
-
SHA512
846ef215101745f3484346c0d0a349cf56c173c08517244435342cd8dcabd9a5ec29d2d623aa34bb481d083a1130627f3c8477209a060b931a9d71ade265f347
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P81vnh:6uaTmkZJ+naie5OTamgEoKxLWmxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
838fb14565902acf63075f6661ffb3999edc72474601fc13a078149be39766ef.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections