Overview

overview

10

Static

static

10

a8508b8c12...85.exe

windows7-x64

10

a8508b8c12...85.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a8508b8c122f9b6fab7baf9294ec4e2bfd93fe7d477bd0d07d9d5d006da18e85.exe

  • Size

    707KB

  • MD5

    041424b5904d5f95341228c656d63a92

  • SHA1

    689e93c9dde9170dee89e1fae6725537da77c585

  • SHA256

    a8508b8c122f9b6fab7baf9294ec4e2bfd93fe7d477bd0d07d9d5d006da18e85

  • SHA512

    ae84c44ca44a174a6de5514f560fc11c2aa7e40a53414ed2bd6fee04d1dcd52dcb72453e80787518afabe898ea5fe450158fc9867d84a4bb863907fa1a3f5f00

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z89vnh:6uaTmkZJ+naie5OTamgEoKxLWcJh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8508b8c122f9b6fab7baf9294ec4e2bfd93fe7d477bd0d07d9d5d006da18e85.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections