General
-
Target
87f402542e98b2b067c91109de7f23efe69a8e7883bfea456485ddd1af25ec02.exe
-
Size
707KB
-
MD5
11f85a9f2f72462d279519f9613a8046
-
SHA1
39d61b8a00f7aed5614dbd284d39eec151b3e081
-
SHA256
87f402542e98b2b067c91109de7f23efe69a8e7883bfea456485ddd1af25ec02
-
SHA512
7c7ac8dfa0fc02bdda16eec1ffeb5f7c34f7716aa5fdae336ecb9014b0b43f7e153c20f9b8fd411df9e51fa8fa3a4d91cc436135cf0ea79563ca8b9469b5a5c5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Yvnh:6uaTmkZJ+naie5OTamgEoKxLWmmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
87f402542e98b2b067c91109de7f23efe69a8e7883bfea456485ddd1af25ec02.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections