Overview

overview

10

Static

static

10

a7a8bece77...59.exe

windows7-x64

10

a7a8bece77...59.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7a8bece77284132dc1d51c6c38c94d3dc00bc9067a1d00250d511984610e059.exe

  • Size

    707KB

  • MD5

    1d5cf5a9228940af872f1dc52bca60d3

  • SHA1

    0bfb992e7f44e3e1c8c16345932f859f82c9eb13

  • SHA256

    a7a8bece77284132dc1d51c6c38c94d3dc00bc9067a1d00250d511984610e059

  • SHA512

    654ec16b2d93d6555cbfff78f5f1862daa7f24c4388c88cc2a0e117c71685ad6d8655e1f5f93640b2a44c2dc945563b527254b3683f96f34709f8acd516ef2ee

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108Nvnh:6uaTmkZJ+naie5OTamgEoKxLWX5h

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7a8bece77284132dc1d51c6c38c94d3dc00bc9067a1d00250d511984610e059.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections