General
-
Target
4065416422f3658886921e87c8396d4263a211f3c66c0302206420e639ee5f8e.exe
-
Size
707KB
-
MD5
a3af3e8d34b5e5016a8c06ce1657f42b
-
SHA1
4e400715d5976f887ebfe74d35e46d0795ba81c1
-
SHA256
4065416422f3658886921e87c8396d4263a211f3c66c0302206420e639ee5f8e
-
SHA512
5fea3378fbb41bebcf736d2d6e3a8e9e5e046661b6f4189a7de56d475db1ea50462e0af3a7b2e76a50eb8a3e99e9c38b4ab0c9f68f3eeafd36e4e47ca9d1441b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Y8Ivnh:6uaTmkZJ+naie5OTamgEoKxLW72h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4065416422f3658886921e87c8396d4263a211f3c66c0302206420e639ee5f8e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections