General
-
Target
8f70850f7f38d89cb48c1c156caf47196bbeb5ef2251daa952911e6165dfdc86.exe
-
Size
707KB
-
MD5
c3ee0d1398060c9dd89eba0bb7f18670
-
SHA1
ebfa3d2f1c878d86a2484844c50b3a3a121a23c5
-
SHA256
8f70850f7f38d89cb48c1c156caf47196bbeb5ef2251daa952911e6165dfdc86
-
SHA512
4c721d84544b53547886d6697e74196f85fd0aff62cf1b8a8d70775cf19dd17195cd25371012aee5fe607dcdcf82dc2e50a644c27dd47ddcaad31dc76a6651b8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1e8ovnh:6uaTmkZJ+naie5OTamgEoKxLWVWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8f70850f7f38d89cb48c1c156caf47196bbeb5ef2251daa952911e6165dfdc86.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections