General
-
Target
85798c9133d99b780d0cf27231f24b841ee900f11506a00320e1e95e66448630.exe
-
Size
707KB
-
MD5
4e9177943c9cd8f9e791875440fb4937
-
SHA1
ee6ec674e1e66920981d5968fbffced3009dbd63
-
SHA256
85798c9133d99b780d0cf27231f24b841ee900f11506a00320e1e95e66448630
-
SHA512
4aff014da8e80e9c8bfe1df7dd5c8aae025e2bbfc8da22ef1e56b6a13b8ed5ec21058d750d66752191fc44590a9957ada6f528075aa3942629f68fe164267b4c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8Avnh:6uaTmkZJ+naie5OTamgEoKxLWdeh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
85798c9133d99b780d0cf27231f24b841ee900f11506a00320e1e95e66448630.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections