General
-
Target
8b8afac3e5f3991fce75e33bcf0212dcedaecf66e7719abe7bacbfbaddaefb04.exe
-
Size
707KB
-
MD5
08bffed9a88859813bafae2cf66c4801
-
SHA1
8c240628e2ab6e302edbd77956fa0eb92ff48e3a
-
SHA256
8b8afac3e5f3991fce75e33bcf0212dcedaecf66e7719abe7bacbfbaddaefb04
-
SHA512
9022c4fff2e9a92293653f3a4f8c1290a550b51aa73e571c9c65832f12bacc86eee7b791d16ae2a20885a2f6bf7a15a4ebd02abcce1279b9a8dd1e329ef51e54
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8hvnh:6uaTmkZJ+naie5OTamgEoKxLWo1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8b8afac3e5f3991fce75e33bcf0212dcedaecf66e7719abe7bacbfbaddaefb04.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections