General
-
Target
4c7352eb6467b8e6dc6424aee1c740bb609a1fb9151e6d2d4ed46cecbe92e7d3.exe
-
Size
707KB
-
MD5
5b50fad268f1d742f47a55a98315f946
-
SHA1
175a087321ec478afe3297c960852126105b85b6
-
SHA256
4c7352eb6467b8e6dc6424aee1c740bb609a1fb9151e6d2d4ed46cecbe92e7d3
-
SHA512
fd971c257cb5db5cb14547acc3f7329db6a3f75f8bf16d4f2a86dab113b373163a5937ae7eec0ce5b03e7f81a57d3cee4204875f768f4e0f8773cd1f6aecf570
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8/vnh:6uaTmkZJ+naie5OTamgEoKxLWxXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4c7352eb6467b8e6dc6424aee1c740bb609a1fb9151e6d2d4ed46cecbe92e7d3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections