Overview

overview

10

Static

static

10

864500efd0...42.exe

windows7-x64

10

864500efd0...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    864500efd07c8aec707ba5f3905f415939688dbe8af9255f8565ee3bb9057d42.exe

  • Size

    707KB

  • MD5

    8582bd108c6913353e4e41020b60cd8f

  • SHA1

    a52a4cb252c27a80026d8ea2ac156d3c1fec7846

  • SHA256

    864500efd07c8aec707ba5f3905f415939688dbe8af9255f8565ee3bb9057d42

  • SHA512

    2ee7b3451d632dc463a7142a964c7b70539321d0bbad72a340a68807168ffef9739faeb4a30d80d191d82c852c5e2417f65f0dd9e35ef469374ce6bdb0d29355

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8Kvnh:6uaTmkZJ+naie5OTamgEoKxLW9Eh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 864500efd07c8aec707ba5f3905f415939688dbe8af9255f8565ee3bb9057d42.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections