General
-
Target
9198ff417154db6393dd727ed9c78cb2f36c4a6afae460ab11275ae5b44e2ae7.exe
-
Size
707KB
-
MD5
c35ea2e48efc04edd073cebf3cd7e79b
-
SHA1
1db34902e1b838816c7f3779ef2775d958773794
-
SHA256
9198ff417154db6393dd727ed9c78cb2f36c4a6afae460ab11275ae5b44e2ae7
-
SHA512
c165a17b1104ff2c61ad2df5a92d32250db1131787b5a42ddff2e5881ca8a176027249e2d4d53b5094c95d44cea97dceb2fdbe0178682ead746905ddf6418449
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118Ivnh:6uaTmkZJ+naie5OTamgEoKxLWI2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9198ff417154db6393dd727ed9c78cb2f36c4a6afae460ab11275ae5b44e2ae7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections