General

  • Target

    f8807377ca4679d4091409378ade823410990d0da5648edfa11cabf8cf1a91d2.exe

  • Size

    707KB

  • MD5

    21141b689f5fdfc8bfd501b32b96024f

  • SHA1

    4c34cd54aceeac5ec15bc833d0c5ce82b5aa7528

  • SHA256

    f8807377ca4679d4091409378ade823410990d0da5648edfa11cabf8cf1a91d2

  • SHA512

    f9642db8be61b946486e7a87d592870e3377cf19ef9015e16c0e64bd069bdad67fbc39e5e2a9819375a88082c3364de15512c319e2e632b10fbab4689104a95a

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWRRh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8807377ca4679d4091409378ade823410990d0da5648edfa11cabf8cf1a91d2.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.