General
-
Target
40a4373da50dfd03cbdc75d85da1f44899587c39f1fbcc3a3217cc3a91d33351.exe
-
Size
707KB
-
MD5
2e1f71373bb36e166dc1683e4b2ca536
-
SHA1
16b29f3f3f2288d59bfcc3bb57351f7fc80341d3
-
SHA256
40a4373da50dfd03cbdc75d85da1f44899587c39f1fbcc3a3217cc3a91d33351
-
SHA512
6f8255530f502b03c449c79b23819e8dff588ed1a70862e5017e5af9e0bc4877b08946f6e3e49086e23127d8c5ab7bde403b65b334b8ec394b70bb9637c88bca
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWQhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
40a4373da50dfd03cbdc75d85da1f44899587c39f1fbcc3a3217cc3a91d33351.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections