General
-
Target
9ac2593a31adf9724d93f524b40338dac66410e4dc1b0c1118d4c24ff63fb6ed.exe
-
Size
707KB
-
MD5
08250ed747cc26c9ea4dc9ff61627acf
-
SHA1
3c966b8702ba884b49a3c95be7a2853c6ed96bc1
-
SHA256
9ac2593a31adf9724d93f524b40338dac66410e4dc1b0c1118d4c24ff63fb6ed
-
SHA512
41c0e80ffe1a3b61c749a68d49a3fdfc9a2e470d68fb446289952420a985d25bae5d24eed15b8e5a57786ce4b3f222d78cd1398d22cf5bfdfb46fef773e81956
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8wvnh:6uaTmkZJ+naie5OTamgEoKxLWPuh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9ac2593a31adf9724d93f524b40338dac66410e4dc1b0c1118d4c24ff63fb6ed.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections