General
-
Target
b800fdef2cfe5005ddc9abec81dc0897c36b65d196420d4e4513193dd007b9ec.exe
-
Size
707KB
-
MD5
db51dac8707a0228517cb95722a8406d
-
SHA1
2e8a0a9f665c6028b9d7cc6946b0f4e42bafec73
-
SHA256
b800fdef2cfe5005ddc9abec81dc0897c36b65d196420d4e4513193dd007b9ec
-
SHA512
64c8823cfb43d90c5b0cf386fdc2a3c7e7c1e87a4914f3a307f73c92e3c012fbe5c3a47214f62b0ad4329c786f556d9bd1bd528f2cb2d7cfe4459347c1b143b9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWChh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b800fdef2cfe5005ddc9abec81dc0897c36b65d196420d4e4513193dd007b9ec.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections