General
-
Target
4e28f6d1e0298f0b4ea909c73806b411cd98333ac4af19357c8617fb1dd79feb.exe
-
Size
707KB
-
MD5
ec3bf31c9f3bf2093f2ebd02ddf74bc6
-
SHA1
c2a7710813460f75c324847253e09de45b5c6423
-
SHA256
4e28f6d1e0298f0b4ea909c73806b411cd98333ac4af19357c8617fb1dd79feb
-
SHA512
99820ef5dfdeda7f0834d1423d0256e3b282f93da57b823181399337837426de2712ccd655a2d76b4611f5394e59f8ddf29e2737b5faa50efb1d7a5ed27f1471
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x8evnh:6uaTmkZJ+naie5OTamgEoKxLWkAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4e28f6d1e0298f0b4ea909c73806b411cd98333ac4af19357c8617fb1dd79feb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections