General
-
Target
9b062304763f179c1eab3e714fccf1b2991b7a90367794a935dcee706431774f.exe
-
Size
707KB
-
MD5
218b6cb79fc679aacd1e04e1f25d241c
-
SHA1
0fd885f6981ec2a6f8b3171f8fffb7b44d4811e6
-
SHA256
9b062304763f179c1eab3e714fccf1b2991b7a90367794a935dcee706431774f
-
SHA512
5f2cd55e6851a5247a32bd997526f36e2661c25e7a9a740e685ddb8e79ee340d115b25249fc3d83d141ed314190acea37e0b21c7478fef91a012c066d31cc602
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O80vnh:6uaTmkZJ+naie5OTamgEoKxLWFKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9b062304763f179c1eab3e714fccf1b2991b7a90367794a935dcee706431774f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections