General
-
Target
86fd5957c055275d39a2027540fedbf4d6a4a0bda96a07bac61ec3afa6d3ca7b.exe
-
Size
707KB
-
MD5
24b377d8f9d9f98350b43eec88c65f41
-
SHA1
b98df138c2e3ab159ad06008a80181e24f90e0fa
-
SHA256
86fd5957c055275d39a2027540fedbf4d6a4a0bda96a07bac61ec3afa6d3ca7b
-
SHA512
0ff21935f744f2b6f00b29387ee320a010bc4dde18677e09a18cf4a56b21bff17b8b7b70726d175b7e6e4c3466b0c3ae0af9a498cf12e9683c903654759c33a9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8ovnh:6uaTmkZJ+naie5OTamgEoKxLWjWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
86fd5957c055275d39a2027540fedbf4d6a4a0bda96a07bac61ec3afa6d3ca7b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections