General
-
Target
8c06c8c209f8d911c9cb01067843225b20021767a203c642efd914a4411b6436.exe
-
Size
707KB
-
MD5
2ca10086e41777cad5947e1717e9bd15
-
SHA1
d9b9c05dacaf425243287226b7b4004ffbb4c5c8
-
SHA256
8c06c8c209f8d911c9cb01067843225b20021767a203c642efd914a4411b6436
-
SHA512
88429934a576c70c06d74110862b53ef244657e7fd35ec3abb81b879fd6c1fd4532027afe1b6407ee35d4e0819e4186d5f8f7dcea2b40a7d05524fc7bb3eef2c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198gvnh:6uaTmkZJ+naie5OTamgEoKxLWY+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8c06c8c209f8d911c9cb01067843225b20021767a203c642efd914a4411b6436.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections