General
-
Target
9c844293b6ae676eeafa8fd8d2967ab248a8e3302f41b1d16ff2c66f36f17e16.exe
-
Size
707KB
-
MD5
f7503e6b602b2e2fbae7e5a69d649c7f
-
SHA1
e16f6c4142c77e3e2554e3b2b38b97ca4e1c0938
-
SHA256
9c844293b6ae676eeafa8fd8d2967ab248a8e3302f41b1d16ff2c66f36f17e16
-
SHA512
31ef360cf7e93caf0eafc2d005c163b4b3954115375091a3d65300f74c41cd4bcae777fa5c3f8108dfe7fee9ff848bcc7bbd03a3698c28f542580465fdb19584
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/87vnh:6uaTmkZJ+naie5OTamgEoKxLWurh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9c844293b6ae676eeafa8fd8d2967ab248a8e3302f41b1d16ff2c66f36f17e16.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections