General
-
Target
4041004a1628c6697249a3e293d912b67cb0fb5079b6996e3e7b6c5b9bddcb94.exe
-
Size
707KB
-
MD5
1fb680e40666dbc6ad15ba6fd686705f
-
SHA1
4d73638adc6baffee4a1a6a17be56cf9ca965bbd
-
SHA256
4041004a1628c6697249a3e293d912b67cb0fb5079b6996e3e7b6c5b9bddcb94
-
SHA512
6e2aaa5de943d59f569c65994a8073ade736a38b5aa52dcbaaec2bb8f96787aa1f8e659ebc01d5de94891d99c77932182b4c38409fec63bdeee27a1c73dfb8fa
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y80vnh:6uaTmkZJ+naie5OTamgEoKxLWpKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4041004a1628c6697249a3e293d912b67cb0fb5079b6996e3e7b6c5b9bddcb94.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections