General
-
Target
9543f8b94143454eeaa99d14184be05bbb29bfde02e90325deb08e4d22e12dae.exe
-
Size
707KB
-
MD5
4c2c42a51cfe04ee36478eaabb455363
-
SHA1
f31676f5228d739d7916738e5c9fcc7e1b8a8998
-
SHA256
9543f8b94143454eeaa99d14184be05bbb29bfde02e90325deb08e4d22e12dae
-
SHA512
e0a547af3d97f08b37d37634af0bf3aa2791f44ee79daf0dade6f4eaab3a8c60c611055350b6f30d7f1547fdbb2d128ef5cbd5fbd52a46e709b1fb3e2aaa9274
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h8cvnh:6uaTmkZJ+naie5OTamgEoKxLW8Ch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9543f8b94143454eeaa99d14184be05bbb29bfde02e90325deb08e4d22e12dae.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections