General
-
Target
89118a9524bd99637502f7a57fc5d3fa0a0665ba2bc25d4ab4763e94b27386a9.exe
-
Size
707KB
-
MD5
e616e33f239fba60aa84c35a39dc8cb9
-
SHA1
434005faa38b1e28b320428d272782ec9571225f
-
SHA256
89118a9524bd99637502f7a57fc5d3fa0a0665ba2bc25d4ab4763e94b27386a9
-
SHA512
93aaa13980bed8c73fe767014123370bc09c153440938a49c803c871554f1cd6f91c472dfa4f2352ea35bf6f89482f46e2022831356e1aaa59ae1d6abea9be78
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1389vnh:6uaTmkZJ+naie5OTamgEoKxLWmJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
89118a9524bd99637502f7a57fc5d3fa0a0665ba2bc25d4ab4763e94b27386a9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections