General
-
Target
8c7c1e090b410de86ce8012cc760c8f4ab7578bde709fc4f17bc7a189930bfbe.exe
-
Size
707KB
-
MD5
8b238dd0b03aced904c5ca1d59a6e909
-
SHA1
a7a359207ae45038266dc3c77cd7892eec029be9
-
SHA256
8c7c1e090b410de86ce8012cc760c8f4ab7578bde709fc4f17bc7a189930bfbe
-
SHA512
6af65eb31e5524edc0f0b241fccf7a454985ff07fb3a294e8287f5af917bba4837d317d9a96f008a3a870c2feb6de158e4f0ba4f4cafbfb3f962ac9d0e8a23b7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t8nvnh:6uaTmkZJ+naie5OTamgEoKxLWAvh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8c7c1e090b410de86ce8012cc760c8f4ab7578bde709fc4f17bc7a189930bfbe.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections