Overview

overview

10

Static

static

10

d8db2c4139...bc.exe

windows7-x64

10

d8db2c4139...bc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8db2c4139501aa4ee2354ed7d77cc95c5c995640571032bb9dacba3375a72bc.exe

  • Size

    707KB

  • MD5

    325b9e5082c1b3c48e7a4921c391b7a1

  • SHA1

    3b623ccd012b61ae78d239f020e1ffa68d619535

  • SHA256

    d8db2c4139501aa4ee2354ed7d77cc95c5c995640571032bb9dacba3375a72bc

  • SHA512

    343e5cc921ee31c2abf9d126b8ae282ad8d7fa62e5a42d4b93ef0c7df0ea6872fd9b5b70b968408f9d7d0be2c6c24ab64bbd512d6180ce7d67e8919a85a78d90

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b8zvnh:6uaTmkZJ+naie5OTamgEoKxLWCzh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d8db2c4139501aa4ee2354ed7d77cc95c5c995640571032bb9dacba3375a72bc.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections