General
-
Target
acbf9ffccb5aa2ae5a2d4a831bd0a1b71bc433a8b897befae66ac39d6e8a2892.exe
-
Size
707KB
-
MD5
d7909aedb8a8d4ec8258c8d9b3323831
-
SHA1
50735605e24dbedada4690da4cb898d1430aa19d
-
SHA256
acbf9ffccb5aa2ae5a2d4a831bd0a1b71bc433a8b897befae66ac39d6e8a2892
-
SHA512
732eee2f98930ad3c1e63f06c71fd037a1f538b11e970a02ce789f22d7103013f7a8348ea78c3a93390ee32ea5d761295814ea1b20f30a1c1820a84774038391
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8Tvnh:6uaTmkZJ+naie5OTamgEoKxLWmTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
acbf9ffccb5aa2ae5a2d4a831bd0a1b71bc433a8b897befae66ac39d6e8a2892.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections