General
-
Target
9093995998e49d17efa28c9a7c4cf91160cd91e2934c01e7259174003727bde9.exe
-
Size
707KB
-
MD5
f038e1c540b8a9b65186e4424c0df843
-
SHA1
381a6261b255464c3ef8a9e0a1f3bacd47c66a71
-
SHA256
9093995998e49d17efa28c9a7c4cf91160cd91e2934c01e7259174003727bde9
-
SHA512
db2102b2af3c4c37434655627202dc882090197722240e0b7379e1dcdbb41c749ba27a7291d4449f1655a09a5fd954b0452edfa41221bc21b741fa4b04c3c4ff
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWeHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9093995998e49d17efa28c9a7c4cf91160cd91e2934c01e7259174003727bde9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections