General
-
Target
9b0522eb81359c9be2b958537cc0e43232de4d1938a32830f3c52a169863af43.exe
-
Size
707KB
-
MD5
fe86282859fd527930a7b6bc53dbb799
-
SHA1
e6a8fba60fbffa525074b0de7a01bc9f9679d9d4
-
SHA256
9b0522eb81359c9be2b958537cc0e43232de4d1938a32830f3c52a169863af43
-
SHA512
88558fa875b896d41a9bebdac1e9dd8d17aca2e1dd245fed19c5327008bc200dce34ff557fe51f41c90fa9b46d7ad16801129c77ca26cbe106832053046ff0e0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z8gvnh:6uaTmkZJ+naie5OTamgEoKxLWq+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9b0522eb81359c9be2b958537cc0e43232de4d1938a32830f3c52a169863af43.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections