General
-
Target
398318d9ed18a39fb92970b71b02c3a79448538cbb883873da824b77f78bb261.exe
-
Size
707KB
-
MD5
a1224fca436bf09253b82d022bc4d621
-
SHA1
048556838acdeb13b4c66f5fefba6c989af10375
-
SHA256
398318d9ed18a39fb92970b71b02c3a79448538cbb883873da824b77f78bb261
-
SHA512
82d069f545957b9f4687df31025f8e2b024d31bb6733ed833a9b538995b6834a59a5378eb7954dd74fb2e35637575f6ac00700194e827b2e0663ff5313ca10a5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1488vnh:6uaTmkZJ+naie5OTamgEoKxLW7ih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
398318d9ed18a39fb92970b71b02c3a79448538cbb883873da824b77f78bb261.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections