General
-
Target
9e72c11f037959b46c0d3c7d3f8f359dc53defb8fe33846bf5255a846011ec1d.exe
-
Size
707KB
-
MD5
84ae073c2054d96b242c14352d84ef67
-
SHA1
45aa84e3c4ab3bbd118282ea16ed894c9d2300c3
-
SHA256
9e72c11f037959b46c0d3c7d3f8f359dc53defb8fe33846bf5255a846011ec1d
-
SHA512
82ae0727f48b3e4e40924d8d30d1498e68bd85a6e7ae7d97052726fb566b91778eacabac8fefca47a09eb83ab365278693998dea45f878f96db3c5d1852df52c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Y86vnh:6uaTmkZJ+naie5OTamgEoKxLWbUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9e72c11f037959b46c0d3c7d3f8f359dc53defb8fe33846bf5255a846011ec1d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections