General
-
Target
8643e36f48d78dea61360716438aab9f5fe97643d36e9aef7ed0db70ff83c03d.exe
-
Size
707KB
-
MD5
9f01bf27011cea5faae170024c0af0ab
-
SHA1
b89269d5e45b1af9751580b06d0190b7e7b76fc3
-
SHA256
8643e36f48d78dea61360716438aab9f5fe97643d36e9aef7ed0db70ff83c03d
-
SHA512
da06653093a4e2ad2c6c4ff398c91c77dce1805ce9955359ce7a578bbc76b22fb559851544f1f078ffda90ec77fac28c82081895a312672dd99dd5eeda5fc71c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h8uvnh:6uaTmkZJ+naie5OTamgEoKxLWUwh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8643e36f48d78dea61360716438aab9f5fe97643d36e9aef7ed0db70ff83c03d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections