General
-
Target
b9d03731eda58c933ba9f9efa1789739271ea507e7d56a0c47a089abe435c662.exe
-
Size
707KB
-
MD5
0a834ef440f2004e0f5e6d81ffa985d7
-
SHA1
c7156b6961e04a790fd9c9674659184328040b4f
-
SHA256
b9d03731eda58c933ba9f9efa1789739271ea507e7d56a0c47a089abe435c662
-
SHA512
edae159a85dcdeef80005708e84c98ae69a22a8690645822d09be4a7e96f84092864ae42931c5e2520d779242587efb9b41b3c873361c5b017daed7e3b51ca1a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8+vnh:6uaTmkZJ+naie5OTamgEoKxLWGgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b9d03731eda58c933ba9f9efa1789739271ea507e7d56a0c47a089abe435c662.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections