General
-
Target
9d4c92ccc6508fa39edb12417b6c773db132f4ccd2590ea5617de69c8df640b8.exe
-
Size
707KB
-
MD5
b5824b94a01878a814dbf2bc97a5758f
-
SHA1
a06c4f5939f32c0390a08d100ce91d84607c7c2b
-
SHA256
9d4c92ccc6508fa39edb12417b6c773db132f4ccd2590ea5617de69c8df640b8
-
SHA512
ab8c5f41be443e99f33d6879b334a310866d637bad5cc08b9df871cf53f9f80393b1d4992faee12ab317a27a036f7e5605435fb8b533760ab63cee61e7559f1c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8/vnh:6uaTmkZJ+naie5OTamgEoKxLWNXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9d4c92ccc6508fa39edb12417b6c773db132f4ccd2590ea5617de69c8df640b8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections