General
-
Target
8bc9fa7c9abc778050af46949ecebdc9afc329e5955e0d5331db3287df4ae07e.exe
-
Size
707KB
-
MD5
12c1a1fa2b469ffb4ba58aa8e6bc6db0
-
SHA1
2ff0a7d8fff0b3629218bc93d5ef8dd8c44ab926
-
SHA256
8bc9fa7c9abc778050af46949ecebdc9afc329e5955e0d5331db3287df4ae07e
-
SHA512
b6f6d744758620c76264930d0fb4c06e026db18f4959c2db12b92dca210d29078676bbe1e0e51bb37987318c3ca6dcd7cc101431dbdca7e09caeb60d0975ecbc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q86vnh:6uaTmkZJ+naie5OTamgEoKxLW7Uh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8bc9fa7c9abc778050af46949ecebdc9afc329e5955e0d5331db3287df4ae07e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections