General
-
Target
98900768d564c6962981edde2759889fdda11bb1113c851468e5c40ddafe1d4d
-
Size
1.8MB
-
MD5
92429807c7d957566d1897d5bf7c6639
-
SHA1
d1dce09219c0df46742fa0eec6f7a6b72ca877f0
-
SHA256
98900768d564c6962981edde2759889fdda11bb1113c851468e5c40ddafe1d4d
-
SHA512
695335aa19928d59e13966a60c0bc7bb591382585234d2d23b892fd3b4be1937fe2c2faf16225e50971ef2b31c9d6ac8c8c6959e43705694b32c1f450bb08554
-
SSDEEP
49152:rjrc2So1Ff+B3k79nfIVGQ41P9x9tHpYZYp+:rjrcSmQ9Njx9tHi5
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Detects executables packed with VMProtect. 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
98900768d564c6962981edde2759889fdda11bb1113c851468e5c40ddafe1d4d
216df81b1ef7bc2aa8ec52bbeef137c9
Headers
Imports
Sections