General
-
Target
d9c30b5e8eab1a561a3fd2557bdc8f51f3a6e77bea7c29990f0c07adf18d9147.exe
-
Size
707KB
-
MD5
8f856be83028daae6609635734b35648
-
SHA1
9109166b63c2124dcdfea3988b33a9c026e22ded
-
SHA256
d9c30b5e8eab1a561a3fd2557bdc8f51f3a6e77bea7c29990f0c07adf18d9147
-
SHA512
87dceaba3b2958ad51caaf54ec91f12dfaf02d3676904978c81c0a0ce8514bd41c19d9b8398c7f9275fb46007770a3f1898a57b2af9258276577a8f90a92303e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1188vnh:6uaTmkZJ+naie5OTamgEoKxLWIih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d9c30b5e8eab1a561a3fd2557bdc8f51f3a6e77bea7c29990f0c07adf18d9147.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections