General
-
Target
9feed0c7fa8c1d32390e1c168051267df61f11b048ec62aa5b8e66f60e8083af
-
Size
959KB
-
MD5
63dcf75ad743b292e4a6cd067ffc2c18
-
SHA1
0d68ea228f49fdd8d044a2fb0dae9174eba73d7a
-
SHA256
9feed0c7fa8c1d32390e1c168051267df61f11b048ec62aa5b8e66f60e8083af
-
SHA512
c982f183caf5859c3d8d8b2c7831e3e6a9d074b651f27ed89fdf486db577d1d4a3af901a8b17ad667ef85a4c900c99766388ff99c564a7443479b8831eb5f43e
-
SSDEEP
24576:uLjr3s2nScu1i1tz3f++5kRzFxk7rMxNeR1R9qpdPF:Ujrc2So1Ff+B3k7965
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9feed0c7fa8c1d32390e1c168051267df61f11b048ec62aa5b8e66f60e8083af
216df81b1ef7bc2aa8ec52bbeef137c9
Headers
Imports
Sections