General
-
Target
83dd0ac2c491eb2c0480ae7d59a1ad9e6b3bbc96733a676b2feba01f4a0b6a38.exe
-
Size
707KB
-
MD5
e94d25e96c2eede75b67b524a5775730
-
SHA1
fbcaf00521bb557d1df6b6f24c5d0cba7fc47dab
-
SHA256
83dd0ac2c491eb2c0480ae7d59a1ad9e6b3bbc96733a676b2feba01f4a0b6a38
-
SHA512
571174a185f149566e8590e03d52ca3068ba1d1e1efa0f4e311268d207633dfe763669df00fb98c2728177420d1dd9cca59f5f5d9fd337886832eff670301f0e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Mvnh:6uaTmkZJ+naie5OTamgEoKxLWUSh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
83dd0ac2c491eb2c0480ae7d59a1ad9e6b3bbc96733a676b2feba01f4a0b6a38.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections