General
-
Target
9123fe79807c4c4098aa1a9283bb8ed803150b1e353ad155f32b3ca5011ea4d0.exe
-
Size
707KB
-
MD5
9ace7ed624bc3255107f71509ee5b634
-
SHA1
10faefccdff306da4d4b3c97b4df8d87cab1a9de
-
SHA256
9123fe79807c4c4098aa1a9283bb8ed803150b1e353ad155f32b3ca5011ea4d0
-
SHA512
391789874ab527ef25fe562d83c5f64207f68114cd38d4e988d7d20e745faa4d033e58a0cb68db1c6406b420ed9bf2fd221d278c5c40acbeb67e13588b432306
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8fvnh:6uaTmkZJ+naie5OTamgEoKxLWV3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9123fe79807c4c4098aa1a9283bb8ed803150b1e353ad155f32b3ca5011ea4d0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections