Overview

overview

10

Static

static

10

250e6e9061...46.exe

windows7-x64

10

250e6e9061...46.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    250e6e90610b3724d005b32a691b25ef3318d0029c10ba96bec04ab05d6eb846.exe

  • Size

    707KB

  • MD5

    f8fada6408f95a72fb02f09fa526f8b1

  • SHA1

    eb5ece6364ed4dad4e9aa8d0a2721d920fe9c2c3

  • SHA256

    f4a1e57b53a3a2d35e43b48ade01fab78d10872e01315721a5b01ac2c0cc8de2

  • SHA512

    e2af407de4f1e9cbba4f01085f9c12bbb1105ca13fb84e3f857024074cc5ba74c43b3d16e601737acce95e6e599fdef240e8ff32418284ea09500b2f32ab8163

  • SSDEEP

    6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L38Hvnh:auaTmkZJ+naie5OTamgEoKxLW1MPh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250e6e90610b3724d005b32a691b25ef3318d0029c10ba96bec04ab05d6eb846.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections