General

  • Target

    949967b8eb2fca6afe831a41aef772decc1797552034176ae1c261dc34f6033a.exe

  • Size

    707KB

  • MD5

    ac43009bfb36db64b2b038cc4b5171d8

  • SHA1

    5b297015b58675dc95f8389e7613bb4e26f123c2

  • SHA256

    949967b8eb2fca6afe831a41aef772decc1797552034176ae1c261dc34f6033a

  • SHA512

    3e00b16a88d77fdf4247fe6431feb982a0d9acf7b8980851ffb1ee32e163f6ae3e9bc513fa17705add49aadc9bc4869dd0e4bd7a2ac6f0c940fd47183d27c74a

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8cvnh:6uaTmkZJ+naie5OTamgEoKxLWJCh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 949967b8eb2fca6afe831a41aef772decc1797552034176ae1c261dc34f6033a.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.