General
-
Target
9c8f8707f9a389e8e6b7e552474dc04d1f7ac872fd03a3a02c6e8afcd793d54b.exe
-
Size
707KB
-
MD5
5c2f2f6572ac1eda059ddc265eb1d249
-
SHA1
1f867ecfe4a28f5ccc3215fba1afc32e652c4339
-
SHA256
9c8f8707f9a389e8e6b7e552474dc04d1f7ac872fd03a3a02c6e8afcd793d54b
-
SHA512
f7ceca05fed8fa734df9d46aee527ccf2a55251de315894b0276c32d692f0d6ac1fbabbd9c21937128dcd4b669bc67fe51a5807c63fce340690b649a0e21aff3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178pvnh:6uaTmkZJ+naie5OTamgEoKxLWiNh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9c8f8707f9a389e8e6b7e552474dc04d1f7ac872fd03a3a02c6e8afcd793d54b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections