General
-
Target
962c0fea93ba44dea718fbc83a948d8359b8e900271e5e3f01934f7f74548122.exe
-
Size
707KB
-
MD5
a2f8f4024a0737a11405dd19570e5897
-
SHA1
2e6b0c68e310fb76d23377074226220f687f5947
-
SHA256
962c0fea93ba44dea718fbc83a948d8359b8e900271e5e3f01934f7f74548122
-
SHA512
99fd55f6616b1c15e77689d47714547d0b18c98ff488346ccd8fc628a56cb58a3882329bc29ff90dec07ef152688d46e255c83730739e4b611bea270e76b916d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8ovnh:6uaTmkZJ+naie5OTamgEoKxLW7Wh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
962c0fea93ba44dea718fbc83a948d8359b8e900271e5e3f01934f7f74548122.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections