General
-
Target
7e19afc8fcbcfbba13a719913a4bae5637bd5326b9bd547155a7bac30a675ae9.exe
-
Size
707KB
-
MD5
959ef24a4287a810c5a97dc74e4aeaa3
-
SHA1
3fba6111e8487788b65cdbaba3daba7ef41736d3
-
SHA256
7e19afc8fcbcfbba13a719913a4bae5637bd5326b9bd547155a7bac30a675ae9
-
SHA512
b8729c9d866278a466dce6685ac676bb554a7ffd855d6beee08df07f5546a291c1ed4733164acb419bd67e62ec33829db4d7409ef6de47e84af948343da267fd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8xvnh:6uaTmkZJ+naie5OTamgEoKxLWGlh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7e19afc8fcbcfbba13a719913a4bae5637bd5326b9bd547155a7bac30a675ae9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections