General
-
Target
4a7cb08e24dc944912a5cc2a6656c96bb78706d9342ddb85a6c6750b1cb6093a.exe
-
Size
707KB
-
MD5
b70a012dab69d62856ae9805a94a4b94
-
SHA1
90c93bd26a4ab8797739f103d5ba2eac830323f9
-
SHA256
4a7cb08e24dc944912a5cc2a6656c96bb78706d9342ddb85a6c6750b1cb6093a
-
SHA512
0520710d83c75338be795a758faafef4261e5ded8772be16252baaf8ae3e2482b404ee65ebff1a017ec4ae65e52c48d091af5447c3a3c818ad79d36f70dd4b1d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8gvnh:6uaTmkZJ+naie5OTamgEoKxLWd+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4a7cb08e24dc944912a5cc2a6656c96bb78706d9342ddb85a6c6750b1cb6093a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections