General
-
Target
4cf08ccff44677cc725ca6e4ac6cd14e51845ba55a2ff7a2d61d791b3ff808b3.exe
-
Size
707KB
-
MD5
0180a500374dc6a7cc3098d063986d36
-
SHA1
6df2c5235c08b72c9d54c2c6a2e8770dd2112df6
-
SHA256
4cf08ccff44677cc725ca6e4ac6cd14e51845ba55a2ff7a2d61d791b3ff808b3
-
SHA512
55e453c75132a5f93caeedb8984563365fa6ec7d4d495358f50df7e5b97ec2f53c0504e8df811a3720617afb884f1af72020d7369e900f49f61399133f97267d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza168Ivnh:6uaTmkZJ+naie5OTamgEoKxLW52h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4cf08ccff44677cc725ca6e4ac6cd14e51845ba55a2ff7a2d61d791b3ff808b3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections