General

  • Target

    89d8bd546e9b57448ecfc6337593b17a2914b587cb81767fb9af4a2f5111d7ad.exe

  • Size

    707KB

  • MD5

    efabc6a55597b6ecf8a64c5279227843

  • SHA1

    ee17ed2ca2342900c052e55041b120b998ce64d2

  • SHA256

    89d8bd546e9b57448ecfc6337593b17a2914b587cb81767fb9af4a2f5111d7ad

  • SHA512

    d3f4b67a654efb30f99783bd74747f7c5665c17efc2ba79e15686d0be0f05c429e0dcd86c573554ec23f2e4561185acaedf4df7764d4a2b2d682a53c7cdcd4d7

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWzoh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 89d8bd546e9b57448ecfc6337593b17a2914b587cb81767fb9af4a2f5111d7ad.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.