General
-
Target
9c06252d1986edeada923c475c6c4958f4751da690b9611140cfecab5e0d6ee2.exe
-
Size
707KB
-
MD5
83f3c971fcabe40c0002cf3b421de60e
-
SHA1
44f46714d4d862b1c400a38dacf98ea98bc783f8
-
SHA256
9c06252d1986edeada923c475c6c4958f4751da690b9611140cfecab5e0d6ee2
-
SHA512
23e2e4c2dc1086fbd1908e0bcc07044a4d86a59cb3282e9e372572ad2fb4c1e06c1745897f5969e145c77f120eb03be77ad0413e726fc1900abd52eccdce572b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118lvnh:6uaTmkZJ+naie5OTamgEoKxLWYBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9c06252d1986edeada923c475c6c4958f4751da690b9611140cfecab5e0d6ee2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections