General
-
Target
87a49c88d26e0bd11b45611220a94aabef759ad6919bf36e2253814b3af40bc0.exe
-
Size
707KB
-
MD5
b87122c1060e711046821b154c5a1c32
-
SHA1
161cd9eae6f98ff904f157a7b7d57e6955ec12b9
-
SHA256
87a49c88d26e0bd11b45611220a94aabef759ad6919bf36e2253814b3af40bc0
-
SHA512
39f3ec9e41c2718a047f51c033521b04e1a2c5732fa8cc4d5b8a711a69a3ca109366e6d866910fb453dc9970f5d9ab465c5615bfe76e77897adeaee6e81f02db
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148Xvnh:6uaTmkZJ+naie5OTamgEoKxLWT/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
87a49c88d26e0bd11b45611220a94aabef759ad6919bf36e2253814b3af40bc0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections