General
-
Target
8c14682e33c4b4fb859a6ba6db1c827e536e904dc8c91a34599b3858400387a7.exe
-
Size
707KB
-
MD5
c0a9c275cbf94a5de2df4b44b50cec47
-
SHA1
7f5c32a5e6582bbe9c92458f9d6438dddd9ec4b7
-
SHA256
8c14682e33c4b4fb859a6ba6db1c827e536e904dc8c91a34599b3858400387a7
-
SHA512
5718037f4b32a714dc121f917a0b54439e626cb28356655866e264e63104090c5e62dfb4baa58014f8f6faaa5a5242d668af6593fbf9bac4c5b8d528a3c9b5d8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWEEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8c14682e33c4b4fb859a6ba6db1c827e536e904dc8c91a34599b3858400387a7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections