General
-
Target
86815409027b6537cdbf9a0f9e767b9ad1f30348b1a1a9a1e80156d60eaaca46.exe
-
Size
707KB
-
MD5
ccdb903fdcb8c0fe9f3090b4db3d515c
-
SHA1
dfcaa665c0345e7bdfb1881159a73b66c8199abf
-
SHA256
86815409027b6537cdbf9a0f9e767b9ad1f30348b1a1a9a1e80156d60eaaca46
-
SHA512
d92facd2c066f935aa4d3386acc82ba9788e71fa14b86af76446314e9ef747cd56d66ec13e4baec47394cf1f9acf754389e394930770639efc1fc69725433ca9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b82vnh:6uaTmkZJ+naie5OTamgEoKxLWKIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
86815409027b6537cdbf9a0f9e767b9ad1f30348b1a1a9a1e80156d60eaaca46.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections