General
-
Target
8e421d40c8c02b9c95fbae7e6ec24920ae92aebfaafba8b3dbe14428317f03ac.exe
-
Size
707KB
-
MD5
1abe427ef963a6a71d35480535810bf3
-
SHA1
f9545f1ae2e7677a719e14acdbc0ae248fe222fe
-
SHA256
8e421d40c8c02b9c95fbae7e6ec24920ae92aebfaafba8b3dbe14428317f03ac
-
SHA512
109c4a89017b6e1006f2cb1817de020271a4874ca437c60f9fdb29d1e111d79a14ec23ca78147f64e1bb60b8aee5f105de16d1067b4ee3c2d21ca3552a76df64
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8Svnh:6uaTmkZJ+naie5OTamgEoKxLWQ8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8e421d40c8c02b9c95fbae7e6ec24920ae92aebfaafba8b3dbe14428317f03ac.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections