General
-
Target
8266651af0b42a11b6612c91a240f8bcc364f5987777924bbff7d9bd61e5014a.exe
-
Size
707KB
-
MD5
b0935ed86ac13f542daf42822fc5ca81
-
SHA1
fbce00d938f8fa97cf7b23187cc67fb5947a9d05
-
SHA256
8266651af0b42a11b6612c91a240f8bcc364f5987777924bbff7d9bd61e5014a
-
SHA512
46a5bf4462b02339e1e38e75e50af48907a27bb1dba742b3eaec61595a62c70dc6796b3aa74023f12dba93bc38770c447840fd77a29c6f323b360c67e0663e5d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWXRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8266651af0b42a11b6612c91a240f8bcc364f5987777924bbff7d9bd61e5014a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections