General
-
Target
4c603748293e261002228e552b4a6e5c6fa1ce403c0f6d1a6262768c0a057812.exe
-
Size
707KB
-
MD5
dbc3adf2d3a38f7eae2368965a696316
-
SHA1
02110a4d4c6f71a98db56cdda334e5aef95368f7
-
SHA256
4c603748293e261002228e552b4a6e5c6fa1ce403c0f6d1a6262768c0a057812
-
SHA512
b0b6c4edc68827b7b988f5022b07b5884368f9461e155d07a578e32c7c2caff3e9afcf416cfc2cf8306a1309b1cfb3226e6f2da9b38329bc35424a0bf416d6a0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h8Hvnh:6uaTmkZJ+naie5OTamgEoKxLWUPh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4c603748293e261002228e552b4a6e5c6fa1ce403c0f6d1a6262768c0a057812.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections