General
-
Target
8548560dba0a5ed3ad680b7743a90114b24df8555e8437e34bb88a3d42092303.exe
-
Size
707KB
-
MD5
b4305a86cd2c4ee669ad89946ab66275
-
SHA1
ed776e75ec9813e93a777d9a7bce9219dbddcddc
-
SHA256
8548560dba0a5ed3ad680b7743a90114b24df8555e8437e34bb88a3d42092303
-
SHA512
cf4d5909dd95d9f9a8f2df25a917f38bf30d248f280f0a9c50f50aca07167216b758ed7c7c88e6f087c846ed1dc2f4334dc5d441b884d98c1d68f22eb112302d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8svnh:6uaTmkZJ+naie5OTamgEoKxLWsyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8548560dba0a5ed3ad680b7743a90114b24df8555e8437e34bb88a3d42092303.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections