General
-
Target
9be4ec56ec93da5ae5bafc747dfdf8ddc5f202e4e97932f80f3e0b1d7fd1df77.exe
-
Size
707KB
-
MD5
15adb8115631e1ec19ac29bfd52de105
-
SHA1
bf11b0d3b4a0575a6465eeeb4a060ef0629b4c7e
-
SHA256
9be4ec56ec93da5ae5bafc747dfdf8ddc5f202e4e97932f80f3e0b1d7fd1df77
-
SHA512
a970c10005fbab1e8a8e523f692d15288c93f7e8b728bb32ce73581cd55e7b40bc64d776406cd6d443b8995b49329114df8dbef1be381b9bc150b4cd95990c15
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8mvnh:6uaTmkZJ+naie5OTamgEoKxLWyYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9be4ec56ec93da5ae5bafc747dfdf8ddc5f202e4e97932f80f3e0b1d7fd1df77.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections