General
-
Target
9b657596759295c6cd5fd1d4f7cad440dc82e7b2a7181fd66e458963b2420874.exe
-
Size
707KB
-
MD5
ac3deff2f0a30f5863294d9d7e7b8ee9
-
SHA1
6ce13a189882a80c0ff5dd907fc49dbba2b765dd
-
SHA256
9b657596759295c6cd5fd1d4f7cad440dc82e7b2a7181fd66e458963b2420874
-
SHA512
e74f11324a83dcb69e1f3f4c7f57e2ca5034762369654100ab48b7fea79daca96fd510ef5d9cdb4eb441d5ac0215972df63e21686ef6b393ea770a3a1e325bc4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Hvnh:6uaTmkZJ+naie5OTamgEoKxLWkPh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9b657596759295c6cd5fd1d4f7cad440dc82e7b2a7181fd66e458963b2420874.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections