General

  • Target

    99a22b49d818a9d7d655ec1a9c727b5fa6949e625f4f0c92c4aa0a00a4e7adef.exe

  • Size

    707KB

  • MD5

    da1fbf454f24dbbc439edfeae98abf97

  • SHA1

    bfe04cc2ea1586e7a5ca41967957d924929b24cd

  • SHA256

    99a22b49d818a9d7d655ec1a9c727b5fa6949e625f4f0c92c4aa0a00a4e7adef

  • SHA512

    2e957636d379f3585f043b3d335196462e77f70b0c7b1ddf022e22b4352483eec953d1d386fcfcac47fde1ba9f2e7937df53a1e4c195f7136b7ef79a30200bb8

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8fvnh:6uaTmkZJ+naie5OTamgEoKxLW03h

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 99a22b49d818a9d7d655ec1a9c727b5fa6949e625f4f0c92c4aa0a00a4e7adef.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections