Overview

overview

10

Static

static

10

c8c7cf3cfc...42.exe

windows7-x64

10

c8c7cf3cfc...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8c7cf3cfc7affdab0371a5020e47be9e3c0919a4a6c339843838c665589cf42.exe

  • Size

    707KB

  • MD5

    ddace4af5437b2b7f6b42fa03c9a2ef2

  • SHA1

    2904eda9e462c29f373df696aa2db5158e38ccbf

  • SHA256

    c8c7cf3cfc7affdab0371a5020e47be9e3c0919a4a6c339843838c665589cf42

  • SHA512

    2b8ac8714bbcf1791486a86c4a659933bb37295fc0050854d59126b7ef3139b4620a441e97119cc0f0d857498778820682929f0c08c3cefe2bac423cdfea3e1e

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1287vnh:6uaTmkZJ+naie5OTamgEoKxLWFrh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8c7cf3cfc7affdab0371a5020e47be9e3c0919a4a6c339843838c665589cf42.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections