General
-
Target
87b050015f0e8bf1eff94e2502d1ca70b219e474196e0d4c8fd8a0de74ad4b7d.exe
-
Size
707KB
-
MD5
117c2535cac118b25913e4426450e473
-
SHA1
a14596a3c69354dedd7be9b27c8d5c839a726747
-
SHA256
87b050015f0e8bf1eff94e2502d1ca70b219e474196e0d4c8fd8a0de74ad4b7d
-
SHA512
61c5a743410726def95b0bd3dad9d534aca97ff9d6e7357ccb627eb05e46ff5d125931f70cb1c007eae5723a04bb5f980b30ac00d7c685f5f01019d0f914ca42
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWWOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
87b050015f0e8bf1eff94e2502d1ca70b219e474196e0d4c8fd8a0de74ad4b7d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections