General
-
Target
92811d3de8b9616a2181e220e4576fccd7698c069d02edf5fa454750be2af45c.exe
-
Size
707KB
-
MD5
2eb616207f5d0a52336c2c94a5ad58a5
-
SHA1
e0e488faa42708e60ea9a2248bcb57556892d737
-
SHA256
92811d3de8b9616a2181e220e4576fccd7698c069d02edf5fa454750be2af45c
-
SHA512
a2f2b0295bf4c36ea4110fda6fe3b6acd5c7946e8288202e4986e46f29ed67e55b0e609174a838fd401bb2c83902a2c9ddd85c566eb3ffa14ec021053b5c594a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1386vnh:6uaTmkZJ+naie5OTamgEoKxLWmUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
92811d3de8b9616a2181e220e4576fccd7698c069d02edf5fa454750be2af45c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections