General
-
Target
4144da4c3b57cb0b5ebdbbad2e5d4cedcadce1f907a2cdda6f636b427b7af72f.exe
-
Size
707KB
-
MD5
c3fd4d521bc75852c6049b0cf54b14f5
-
SHA1
dc2c467d087d10cc90a01c9a9fe7a903c0fcbf1c
-
SHA256
4144da4c3b57cb0b5ebdbbad2e5d4cedcadce1f907a2cdda6f636b427b7af72f
-
SHA512
fbbf597bf0f0744de0e0e9276ee96b142143fbc1b4a988f389271b8761711f75861234be48dd28a1f9ed5215c06c66f198dce88c74d02d11b5cd927abe78dfc3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWkOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4144da4c3b57cb0b5ebdbbad2e5d4cedcadce1f907a2cdda6f636b427b7af72f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections