General
-
Target
a38875f89112236d14ba7b26c8ff787302860af1731d19dfea2dc8080a42e457.exe
-
Size
707KB
-
MD5
98176600248afceef0310b6557d99dce
-
SHA1
93e182da24ea047bf96bb2f2744a6b24c035530d
-
SHA256
a38875f89112236d14ba7b26c8ff787302860af1731d19dfea2dc8080a42e457
-
SHA512
bfbeefb4646f6fc3c0503e8765afa35b1ba3f2d6b2cca31b23db956810f859b5ad2b964465514fe8a246a383c0f1076a3245a8ea4badc48857542c74b0281670
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8Uvnh:6uaTmkZJ+naie5OTamgEoKxLWiqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a38875f89112236d14ba7b26c8ff787302860af1731d19dfea2dc8080a42e457.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections