General
-
Target
8ba3464969005f606fd318475238ff936a176b73664f00b624498756383b21a4.exe
-
Size
707KB
-
MD5
0d5c7c3c6a4e6a4719c3f8b57f165224
-
SHA1
1d70c371040b60403a6e751077af3eae69e5e780
-
SHA256
8ba3464969005f606fd318475238ff936a176b73664f00b624498756383b21a4
-
SHA512
07156989a04aa267381dd50f8faa81834fc9ecc1d23909452966ddd5dc013030bc98ae8432bb7613b23f10234ee107b6e1bb0d37e810573098032a2b81a5589c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p86vnh:6uaTmkZJ+naie5OTamgEoKxLWEUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8ba3464969005f606fd318475238ff936a176b73664f00b624498756383b21a4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections