General
-
Target
8765857268cbc9a6179fac2a5e7f319785706cd777bab06973c1bfc4d02aad24.exe
-
Size
707KB
-
MD5
864b8b6574f7f649c683c2fa00f3bf2f
-
SHA1
9fb1a69e4b841c24baa86626df032bca98cf437e
-
SHA256
8765857268cbc9a6179fac2a5e7f319785706cd777bab06973c1bfc4d02aad24
-
SHA512
106ca117bcb6da4f600d5ccbdd5dc718b02ed20129014d69401f1c4bd5c4c71d7b5892f0e318bbc4cf60b7fa2528d5dbd50261b468ec9bf9a0e629dd480ee9f8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138Wvnh:6uaTmkZJ+naie5OTamgEoKxLWeoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8765857268cbc9a6179fac2a5e7f319785706cd777bab06973c1bfc4d02aad24.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections