General
-
Target
d8cdb0045b331fd97885554f653cd85470b12ea5c45d4ff1e29419fca0f37bfc.exe
-
Size
707KB
-
MD5
4590c604246b7bececd52abad054f218
-
SHA1
051a2553973dc9653eaad930c237239841213990
-
SHA256
d8cdb0045b331fd97885554f653cd85470b12ea5c45d4ff1e29419fca0f37bfc
-
SHA512
9df2ef4a176e96a8665675ac71e66d6713d19c75b7d4590b8683c86442235a44df920e3afe421817c9f069e223c3cc09f5d82fcd51c769520b3cdb2eb393b47a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8/vnh:6uaTmkZJ+naie5OTamgEoKxLWuXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d8cdb0045b331fd97885554f653cd85470b12ea5c45d4ff1e29419fca0f37bfc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections