General

  • Target

    6c924bca111f45d37e07a666914657b4f7572160d6ab42a74d1abb5fc087a55b

  • Size

    2.8MB

  • MD5

    ad1e0745f239e343610a46274139688f

  • SHA1

    8d37f4110739d9496f36bad97bd38e464c3e3a35

  • SHA256

    6c924bca111f45d37e07a666914657b4f7572160d6ab42a74d1abb5fc087a55b

  • SHA512

    7bb5d51cf195a3c38955f87bad4c477d15c2f477e7d2bb76b02cf1749b2267bd48b7e4e8ddc876d8283ce073ae11063df049994850ad6114fa3fe53b250369e5

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c924bca111f45d37e07a666914657b4f7572160d6ab42a74d1abb5fc087a55b
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections