General
-
Target
44c715da83d583abf6be6c32de1e766bb2bf6ae75a53c7577c8f6d7c7aa53ea6.exe
-
Size
707KB
-
MD5
f74905497f5e49919b3fb0796fe2cbf7
-
SHA1
1a7b1f33cbeb560eff8db36b0f94c3bbeb24f92f
-
SHA256
44c715da83d583abf6be6c32de1e766bb2bf6ae75a53c7577c8f6d7c7aa53ea6
-
SHA512
f0ffc7947db50cc10c4008e9e25e6d6c906531f817839ff05b18aa10781755304f6d7c3d2198b6460ab0b4673a8042cf5fa09c46b8cb500e3fc1a7f5290dd1fa
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8Tvnh:6uaTmkZJ+naie5OTamgEoKxLWaTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
44c715da83d583abf6be6c32de1e766bb2bf6ae75a53c7577c8f6d7c7aa53ea6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections