General
-
Target
984fdf8b9f35c5ac7c45d400d831d8d34cb44b935215cbc1b91fe8e42aa50685.exe
-
Size
707KB
-
MD5
2cdcf98a9929d4ad50e567cce28e8db3
-
SHA1
a806cb5b1e9f8946ee5b0ac456b45d178043a598
-
SHA256
984fdf8b9f35c5ac7c45d400d831d8d34cb44b935215cbc1b91fe8e42aa50685
-
SHA512
12be91504fcefd7b2f8e79b9886c054e647455862aa929723523e9fda287e1b021557547f673c581c941851731630f456092f4d798693e0726c3e6fce4395da7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8Uvnh:6uaTmkZJ+naie5OTamgEoKxLWJqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
984fdf8b9f35c5ac7c45d400d831d8d34cb44b935215cbc1b91fe8e42aa50685.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections