General
-
Target
078c7be45c68cc22a2a1d92e0dfd1a15145188854c43a9ec1ab345200d9ae5d6.exe
-
Size
707KB
-
MD5
e3a23445e0e8a60d7809964667aa2857
-
SHA1
e86a375b2cc393e46d412d23997c6fca13c73257
-
SHA256
078c7be45c68cc22a2a1d92e0dfd1a15145188854c43a9ec1ab345200d9ae5d6
-
SHA512
213ed77cbd8655c83764f5520d437295af7570a5cdae228c574d830743784a0e59a8b632b5797aa9fc5cb95270d9ce3305e65b64bc9180eb48248f3ab6d02d32
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118Bvnh:6uaTmkZJ+naie5OTamgEoKxLWAVh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
078c7be45c68cc22a2a1d92e0dfd1a15145188854c43a9ec1ab345200d9ae5d6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections