General
-
Target
88f9a825c6fb1dab52b117cc7199c358cd6fb41d89846998d2ca9805464f480c.exe
-
Size
707KB
-
MD5
253e4a9d31647e6695bc80561814f591
-
SHA1
2197c8ed9cfae09208db41eb96b0564c30a894e4
-
SHA256
88f9a825c6fb1dab52b117cc7199c358cd6fb41d89846998d2ca9805464f480c
-
SHA512
c540db1244c4445ead641067fb078fa43e04da4291cdda121e633964b80e75f30ca45644838ad911ae05c8deceac6d839bff0ac39e204ba02006498510e47be3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8bvnh:6uaTmkZJ+naie5OTamgEoKxLW+Lh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
88f9a825c6fb1dab52b117cc7199c358cd6fb41d89846998d2ca9805464f480c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections