General
-
Target
8786e14950af344b120489267fd7e137a1f951bea625a2647445e5ea57b153b5.exe
-
Size
707KB
-
MD5
9d364b7cd9d0be23e2feec28e1c0a8b5
-
SHA1
000f61f5673e55c58e91fb6d1dfc6942aeab3f9f
-
SHA256
8786e14950af344b120489267fd7e137a1f951bea625a2647445e5ea57b153b5
-
SHA512
f8ed3772626ce27f691d3a96451f8840120a10ccffcb35b24fab367d11331d927de2a07c5c6a73ccd465ac522a60596bc38953814d78016c83abce0aa6a1aaff
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8Dvnh:6uaTmkZJ+naie5OTamgEoKxLW/jh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8786e14950af344b120489267fd7e137a1f951bea625a2647445e5ea57b153b5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections