General

  • Target

    9b38fa10a0277a375ec50d000b011f0c9f1d4846998d8ffa24a250250b16752a.exe

  • Size

    707KB

  • MD5

    054e9b99560a5583c3245bebea65cb72

  • SHA1

    763c9ab67ed26b92e67796094068edd9317e1cae

  • SHA256

    9b38fa10a0277a375ec50d000b011f0c9f1d4846998d8ffa24a250250b16752a

  • SHA512

    c73aaa8b3aa8ece05d3bb4fe84f1e995aded8c0f5d3f374d7c176fa73bfa0475fac3c209cb448ab22e28e99c67ce8a48932887245bef949bc000e2a3cb395ce5

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8bvnh:6uaTmkZJ+naie5OTamgEoKxLWNLh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b38fa10a0277a375ec50d000b011f0c9f1d4846998d8ffa24a250250b16752a.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections