Overview

overview

10

Static

static

10

97a25c6542...1e.exe

windows7-x64

10

97a25c6542...1e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    97a25c65420e6210f7ea73df65fd5d8e3b59645d72485000d3a763c9fd655f1e.exe

  • Size

    707KB

  • MD5

    498cb6dec33f85cacc8a3d2b18eb707b

  • SHA1

    3be92e0c111ee067c6ff2dc18048b0034c347e6b

  • SHA256

    19fbd214f2e2a7a7a10a61832565b247224480f66a2e7dfc1bd8086166d23dc3

  • SHA512

    b949b539faf8020d2d0367ea3e17437e719c4a4cd3cd045cd2fefd9f72832109cdc2b8b67fb064af8c22d4d0e2e13c177a39896c79cf4131e57a33c56db2bd4b

  • SSDEEP

    6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/8Mvnh:auaTmkZJ+naie5OTamgEoKxLW2Sh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97a25c65420e6210f7ea73df65fd5d8e3b59645d72485000d3a763c9fd655f1e.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections