General
-
Target
8b4be96713f2fa0198f7b06af238cb057492fc21b8ab6349681f8d639afccbda.exe
-
Size
707KB
-
MD5
1c35a2a66ca576c81f9cc55dd1042689
-
SHA1
caae95841ebb7b9ab24c51bc8ac493e35eb809c7
-
SHA256
8b4be96713f2fa0198f7b06af238cb057492fc21b8ab6349681f8d639afccbda
-
SHA512
b8d649e759f059cc01d1d38a62d61d49cb4ad124857e61d0148e7fc0906e79e7b2374c9713d74c6ca66b5928b744aaec69576a1ea23c897fe6c71cf854fcc3a6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B82vnh:6uaTmkZJ+naie5OTamgEoKxLW8Ih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8b4be96713f2fa0198f7b06af238cb057492fc21b8ab6349681f8d639afccbda.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections