General
-
Target
8236d22e064c2320927b0319372a429ccee9b8379a4c26d8f45732a4f68649a5.exe
-
Size
707KB
-
MD5
7d1fb2daba3c4997fae5ad71f8ff4660
-
SHA1
af3d94ef3c2f5bdd3d1a664bfa9cc76f23d8e0a8
-
SHA256
8236d22e064c2320927b0319372a429ccee9b8379a4c26d8f45732a4f68649a5
-
SHA512
f3c407df175a8c107763b7cf1d8e5d0bb4bbe5f06d29e9440188bf01ca8b97241996f582927f80ee6833b27474357c39e3cb29940a7789df0353cfbb97178deb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8Rvnh:6uaTmkZJ+naie5OTamgEoKxLW1Fh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8236d22e064c2320927b0319372a429ccee9b8379a4c26d8f45732a4f68649a5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections