General
-
Target
9e8f8c50b5a221c2ca2c1c85bdbbe016a0ba368bb916d51681740cb4470e0da8.exe
-
Size
707KB
-
MD5
0d62009511ed1bfcc2412fc0652d4d61
-
SHA1
83f243d0083d00654cf572081facc012a09758e8
-
SHA256
9e8f8c50b5a221c2ca2c1c85bdbbe016a0ba368bb916d51681740cb4470e0da8
-
SHA512
31ecfe21bbf2b0997cdcfad144b8e22a93583eaac6e586ffb9a21e79abc00cd073bc235bdbf567be8c4ff391bd00174a233520f6ef3cb11e6fc60f62e5d704b3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8yvnh:6uaTmkZJ+naie5OTamgEoKxLWHch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9e8f8c50b5a221c2ca2c1c85bdbbe016a0ba368bb916d51681740cb4470e0da8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections