General
-
Target
4be7bd24d4b5f1d006cfc28a5a327a0c643b0c160f8e8f48021da8681553bff3.exe
-
Size
707KB
-
MD5
94bcfc87f557e0955b93dd15f79315ed
-
SHA1
fea243bdbecf5e0064f36845093e7c8148915186
-
SHA256
4be7bd24d4b5f1d006cfc28a5a327a0c643b0c160f8e8f48021da8681553bff3
-
SHA512
d5f2cea82f44fd43baf98c8c35ae549959f0efeb277cc0f83faac1e17570814d3cb2f8fdba900d87f9078941fce77d1f5bf72d61b011f95ae16bea785010c94d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m86vnh:6uaTmkZJ+naie5OTamgEoKxLWtUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4be7bd24d4b5f1d006cfc28a5a327a0c643b0c160f8e8f48021da8681553bff3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections