General
-
Target
04a8c6994637f4481098594b9c7d0ec117c6e28ce9fd28fb4dad6d791f40ecc1.exe
-
Size
707KB
-
MD5
45d760036a61b020aeff89279750b22c
-
SHA1
80b8a7d2a0e2cefe02c87a0e20a508df85d2603c
-
SHA256
04a8c6994637f4481098594b9c7d0ec117c6e28ce9fd28fb4dad6d791f40ecc1
-
SHA512
245e19b0a4ec6443b5dd7ee31165fccd4dae77d2546172c0197a26ada715e635f382a3907c7388d62f59c02c7eec1be5072f23ae47202572f5194d05f0c87107
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWjRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
04a8c6994637f4481098594b9c7d0ec117c6e28ce9fd28fb4dad6d791f40ecc1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections