General
-
Target
9e4540de6b3736239523ee9026b92af88f5ed805450d7a76aa33f0a11c046f23.exe
-
Size
707KB
-
MD5
339e540741e3b5d280ba7ba72749e9b1
-
SHA1
23605e59699e13aa30d140251880415a31c7496e
-
SHA256
9e4540de6b3736239523ee9026b92af88f5ed805450d7a76aa33f0a11c046f23
-
SHA512
e9638b50e0219b0fe5521753cb521adc853a3a510c4f78baedd28bc361c76c9ef8aa4478d02a18c5b605c01c5f6e7c759ce5d6026a64469c22f77e060ed807e0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1181vnh:6uaTmkZJ+naie5OTamgEoKxLW4xh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9e4540de6b3736239523ee9026b92af88f5ed805450d7a76aa33f0a11c046f23.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections