General
-
Target
a9cc3a787bf16e1c4787de10c925083c3bec102ab1d101ac19053e4f3240dee7.exe
-
Size
707KB
-
MD5
65ad67bfd6ba5d8451fc7d672bff2cb3
-
SHA1
5ed62228848db94f390894e360b3ad5621863749
-
SHA256
a9cc3a787bf16e1c4787de10c925083c3bec102ab1d101ac19053e4f3240dee7
-
SHA512
6b1879a87adb280e13287d6c71ce52b6ecf0547d11a37c43b0e1dc770281434f13d00c962318dae791410198d849bbfb15913310a82ff854447cf752b81a6ea6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Cvnh:6uaTmkZJ+naie5OTamgEoKxLW2Mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a9cc3a787bf16e1c4787de10c925083c3bec102ab1d101ac19053e4f3240dee7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections