Resubmissions

03/02/2024, 09:25

240203-ld2pgsgdfj 3

03/02/2024, 09:18

240203-k9sk1sdhb3 10

General

  • Target

    9657353a5d0901d88b2ee7d3c2f1d0338cf5cd44714a9266cfeb04be84e56256.bin

  • Size

    707KB

  • MD5

    523689fa408c6725632d5a817b6d9ce5

  • SHA1

    ca27cb8475a6abcdf9a69a0b822b887b24ec95d6

  • SHA256

    9657353a5d0901d88b2ee7d3c2f1d0338cf5cd44714a9266cfeb04be84e56256

  • SHA512

    2bd118a4fde2c4d3a6406ef50aa78cdf00fc0fe5ad5402806eb17e713a101fe2990a0251ce3c3a36797bea301e707b22cb94ba9dc68a20484661b9c84239f0cb

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8kvnh:6uaTmkZJ+naie5OTamgEoKxLWFah

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9657353a5d0901d88b2ee7d3c2f1d0338cf5cd44714a9266cfeb04be84e56256.bin
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections