General
-
Target
01fe590ff1c167d960ede853e9c3a9832119de9a2e2ed0abc5fda5dbda75f468.exe
-
Size
707KB
-
MD5
3f843618cae16d5558169b294cc46f1a
-
SHA1
8fb372e8d4b491c0e7625ae09a4caeede06b046f
-
SHA256
01fe590ff1c167d960ede853e9c3a9832119de9a2e2ed0abc5fda5dbda75f468
-
SHA512
11f8c3130c04713f25454c5c16551f344a5dbe18e4a3558c2728403a1f35a2e0320fe9b5bf49db8a206d32a76ca9908b755d44c62a88f1bf283c7ff929ea5711
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8Qvnh:6uaTmkZJ+naie5OTamgEoKxLW/Oh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
01fe590ff1c167d960ede853e9c3a9832119de9a2e2ed0abc5fda5dbda75f468.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections