General
-
Target
8dacd0a37204acfa0b126f2abcbcaa040f04d1d99f8a9b55ec1daf0a381a5f48.exe
-
Size
707KB
-
MD5
5fd98af2af802679cf489d7eec02a7dd
-
SHA1
00e65c9821569baafb7a07f7080c774414aa0ac0
-
SHA256
8dacd0a37204acfa0b126f2abcbcaa040f04d1d99f8a9b55ec1daf0a381a5f48
-
SHA512
6b9fb5aaa97efa298f574b09556c7df20182e6b253f95d164a647d7f23e65cf1fb362b940fb58a9425495ed569b48fe672b8d4a2686e9c413a206c8148d857f2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Ivnh:6uaTmkZJ+naie5OTamgEoKxLWv2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8dacd0a37204acfa0b126f2abcbcaa040f04d1d99f8a9b55ec1daf0a381a5f48.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections