General
-
Target
96f7462878d3502e9777f4128f8a4a24e164a208953ea27dfe605cdf5a9608a3.exe
-
Size
707KB
-
MD5
d221f2a92375ca9eb55144af59a75802
-
SHA1
e0aea272fae52b21399c266a51c8c047b2e0a4b2
-
SHA256
96f7462878d3502e9777f4128f8a4a24e164a208953ea27dfe605cdf5a9608a3
-
SHA512
ead17bbc77bbd8822c0be115ce5550b2819c061bd226f3f71c0b8c1fbec3d50470331cc2a056a67cfa4446868d702976e2fd270a48ddbb64202121a342c7b132
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8Cvnh:6uaTmkZJ+naie5OTamgEoKxLWKMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
96f7462878d3502e9777f4128f8a4a24e164a208953ea27dfe605cdf5a9608a3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections