General
-
Target
9ca37b03d8d20519a95cde4df37499a13e460a8d3fcbbb286a41786b94fc3670.exe
-
Size
707KB
-
MD5
80c411a6307d296da3a269d95ba02d9a
-
SHA1
667d3217b12f8fa7d17e59066af2887fbb5e47b2
-
SHA256
9ca37b03d8d20519a95cde4df37499a13e460a8d3fcbbb286a41786b94fc3670
-
SHA512
1a2b963323a1d892ec522c44a618e4f63a4e1dab8aeab549b37cccecbecf3b003f701c721d257d6fc5745a20422e282027a16a0757ed503494df441fdde2f9ec
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Ivnh:6uaTmkZJ+naie5OTamgEoKxLWt2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9ca37b03d8d20519a95cde4df37499a13e460a8d3fcbbb286a41786b94fc3670.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections