General
-
Target
9a4225a41355a0e622669c6bc113e5a090d6a4dac1762b76ce5f7dca24391273.exe
-
Size
707KB
-
MD5
37a654dc404a3f485b33f4d69d050ade
-
SHA1
0b266269668bb00b8178ac4c38d11d32fa42f0be
-
SHA256
9a4225a41355a0e622669c6bc113e5a090d6a4dac1762b76ce5f7dca24391273
-
SHA512
eea2f811af1fc4c75535c63c851b76656b016ab186ebb69529fbb3c21f555fe50518956648d7ae75675f152e3e189e2c11819540936ad8807d4379a584c56e76
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8Avnh:6uaTmkZJ+naie5OTamgEoKxLW5eh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9a4225a41355a0e622669c6bc113e5a090d6a4dac1762b76ce5f7dca24391273.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections