General
-
Target
8a206350d5135523d9c1807c057c8819ba3e9f50ca83c9a3f546eeebf3fa178d.exe
-
Size
707KB
-
MD5
a13a8ae3065caa0650536a978cc83d9d
-
SHA1
cfcac9d271270432045b1fadd22e5e22fe63d907
-
SHA256
8a206350d5135523d9c1807c057c8819ba3e9f50ca83c9a3f546eeebf3fa178d
-
SHA512
83f48da6226808ee72bb328de46f917d5efde6ac839722dd09b0fbda34c47551134c2a9cad2e30bb4f43833ecabc4eb565947efdac9b8e81143272ca383c1daf
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Rvnh:6uaTmkZJ+naie5OTamgEoKxLWXFh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8a206350d5135523d9c1807c057c8819ba3e9f50ca83c9a3f546eeebf3fa178d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections