General
-
Target
870e0036a8538c5bc9685312b8b14c622deca4bb85270236314a2b62c1a39d30.exe
-
Size
707KB
-
MD5
d8dd4b55492970647b524665cc3b35b8
-
SHA1
5c4adfe3a4953e667f2766c02d350a6c61bea436
-
SHA256
870e0036a8538c5bc9685312b8b14c622deca4bb85270236314a2b62c1a39d30
-
SHA512
72f3ed3ab94404d1c3c17b4735f4072a47bf16dd3bc7d1cbfb336a08972f5ba384bd4d269777a84bedb78db15216492be2cc229afa686e20c379ae42be66b305
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWFOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
870e0036a8538c5bc9685312b8b14c622deca4bb85270236314a2b62c1a39d30.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections