General
-
Target
8bbc691ffb3fb4e88a39985d7edffc020413fdd3a450673df07eb4ece4a02533.exe
-
Size
707KB
-
MD5
69c36101fd53e785f53c88b0dd3dbc41
-
SHA1
52e0051996dcc79205bf1dcb98b75f60d75da3db
-
SHA256
8bbc691ffb3fb4e88a39985d7edffc020413fdd3a450673df07eb4ece4a02533
-
SHA512
6104784b430679b33117ab67fdd51efc70a8faf599e4c136cb54a060b04aab35dd1fe09dc591b0fdd2497c0c4a1591cd32294dfea55b8557626a5ceea264fa18
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1l8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWQEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8bbc691ffb3fb4e88a39985d7edffc020413fdd3a450673df07eb4ece4a02533.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections