General
-
Target
a9d368d5749e97c11dd3a45a5332fbae994c8e68ce389f4a08350319e887cfe5.exe
-
Size
707KB
-
MD5
eb6230bf114664eca4bca7ee68368788
-
SHA1
58d368e951658f8bcf6cb1d4672e0860479c2697
-
SHA256
a9d368d5749e97c11dd3a45a5332fbae994c8e68ce389f4a08350319e887cfe5
-
SHA512
2b2927ade853ffae8cc14f27d4af467dcdf21b0eadd318d3d9d55120db8208d2c80fb24291edbcc0fc31395e64cc3e386236fdca8b98ad13279eb2ce6b8a0ace
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/8Yvnh:6uaTmkZJ+naie5OTamgEoKxLW2mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a9d368d5749e97c11dd3a45a5332fbae994c8e68ce389f4a08350319e887cfe5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections