General
-
Target
04757b40dd4da0311526677820bf77afa9495ca04924eaa924a785c606f57141.exe
-
Size
707KB
-
MD5
96a556e203393c5df6f3fac9f8a98e12
-
SHA1
00e4d6ba8abbb0ec0f3277fa946fb7e826d8524a
-
SHA256
04757b40dd4da0311526677820bf77afa9495ca04924eaa924a785c606f57141
-
SHA512
97f6a706afb34ae9d90f90c207732481dec7f999051bd8b55e74140cc1c60607d229aa18e9352617f9de5ccd81b39fd0c3cef983a8264409f0fede654f4e7f52
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWUQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
04757b40dd4da0311526677820bf77afa9495ca04924eaa924a785c606f57141.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections