General
-
Target
b9b6f3524e97420f90c458dc7b5a157f8a6334080bdcef0e9b65619ed86c90c2.exe
-
Size
707KB
-
MD5
31c016b8e1443de60ba630f56971e08d
-
SHA1
da6a8af91cc7fc7e41d78580bee7c35d13f6d264
-
SHA256
b9b6f3524e97420f90c458dc7b5a157f8a6334080bdcef0e9b65619ed86c90c2
-
SHA512
ce0f7e9a0a700da83080fb3e0324fad272baf4b00b52f448db25699955342aeba93d9d17ff8e70af9f1ccc72cb87bdf7345f88c437b97fad58c7de3a6aeac5d6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Hvnh:6uaTmkZJ+naie5OTamgEoKxLWSPh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b9b6f3524e97420f90c458dc7b5a157f8a6334080bdcef0e9b65619ed86c90c2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections