General
-
Target
89b60dffdf31d79ef213afc7fa03593737cea228a1ed5d4bf577ef9cfb5ab9d6.exe
-
Size
707KB
-
MD5
6b3e04587f3d80566cad132994799719
-
SHA1
0c6d1bbf0f2476c25d889172b5a3404c08310912
-
SHA256
89b60dffdf31d79ef213afc7fa03593737cea228a1ed5d4bf577ef9cfb5ab9d6
-
SHA512
bcced763b3347980cb501a45d95559c46fec63c6547c722894b320844947621dfe2e961366b8eb009526ea3fb2cb7eb985353a264785d031d4d9eb506c6ab722
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8uvnh:6uaTmkZJ+naie5OTamgEoKxLWMwh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
89b60dffdf31d79ef213afc7fa03593737cea228a1ed5d4bf577ef9cfb5ab9d6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections