General
-
Target
a93a20d83b6a3c387373ba82f9d2b6580d462c9767068415d98d961b261ddef0.exe
-
Size
707KB
-
MD5
2a123c9ba1a9f36e07a2f72e2a6098cf
-
SHA1
8f37565aa6e033fa6479d052a49b64cb238dbf41
-
SHA256
a93a20d83b6a3c387373ba82f9d2b6580d462c9767068415d98d961b261ddef0
-
SHA512
7323e098625f921e7033b99ea91376b6c5c7ae110aeb76da2940b32253526aa6fffd5fcae4b3c8f1b44fa44896e2fbc84b529f6b93c3d573825d76c934dd8951
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8fvnh:6uaTmkZJ+naie5OTamgEoKxLW13h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a93a20d83b6a3c387373ba82f9d2b6580d462c9767068415d98d961b261ddef0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections