General
-
Target
b89e47f5987e5c4c92c3b898aa2a24d9d261706f8f37fa4ade066acf59a182ac.exe
-
Size
707KB
-
MD5
0022382d5c2a0120bc4330b7cca7e38e
-
SHA1
8a9ca241bf985845e592bf494a984fe93744e146
-
SHA256
b89e47f5987e5c4c92c3b898aa2a24d9d261706f8f37fa4ade066acf59a182ac
-
SHA512
4d274e5751ab77fa1174d33110918ba2acb8f633a8b9d22dad87021f6e1c74693e7070f2f5b09e9d93d29c4d123b8dca8f52b0ecc7be55db32bb85de3a54a829
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8/vnh:6uaTmkZJ+naie5OTamgEoKxLWDXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b89e47f5987e5c4c92c3b898aa2a24d9d261706f8f37fa4ade066acf59a182ac.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections