General
-
Target
4dbe86c31a783a5da8f22a0066ea58463127a00f52333a8bc2932585e8d9001e.exe
-
Size
707KB
-
MD5
4b3c9038dc997eb7fa5a5141c52bd076
-
SHA1
2558be0d60802f486924bea69ea9ecf95aae6254
-
SHA256
4dbe86c31a783a5da8f22a0066ea58463127a00f52333a8bc2932585e8d9001e
-
SHA512
f2f0663c6dd2c899a87e1aa7dfae2f2f04746ed5499bfff20e54e8197858c264d2eeb520ff277fbd24db21f997c06548d87203c899dfebe29d682e9a737689d8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8hvnh:6uaTmkZJ+naie5OTamgEoKxLWi1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4dbe86c31a783a5da8f22a0066ea58463127a00f52333a8bc2932585e8d9001e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections