General
-
Target
8c1559d869780780a883add5790074d7b511522946de491ff723002399dd556c.exe
-
Size
707KB
-
MD5
769a6a2fa85143ba37402527ad6b1f96
-
SHA1
32cae0b6e0f723d30b45f49f5453a58cdddd2e79
-
SHA256
8c1559d869780780a883add5790074d7b511522946de491ff723002399dd556c
-
SHA512
9a8a53fb3e90fed3aba5c44f1dea30b7b7aeb7b03368fb71b0acad3f1e94b6399b10122e3308c7418015957725edc1f2d8186692b267e53ddfee448cf64476df
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O83vnh:6uaTmkZJ+naie5OTamgEoKxLW1fh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8c1559d869780780a883add5790074d7b511522946de491ff723002399dd556c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections