General
-
Target
07c02f25dbfaf204f2984432a3c293ef59d9f17f4da91b04e99cf22e04c08453.exe
-
Size
707KB
-
MD5
fb00bada58b8570d8c0572e824488630
-
SHA1
5cc1a23a459e8224228f2fefbde00e24dab9f5b8
-
SHA256
07c02f25dbfaf204f2984432a3c293ef59d9f17f4da91b04e99cf22e04c08453
-
SHA512
d530a52133b14bcc61af7b3d5b692bf8012baedff2abc554d4911eacd7be353f1dc58e4f01a18769dbaf327754219d9af181f1290ff3a948d01f50f678e50fa9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8ovnh:6uaTmkZJ+naie5OTamgEoKxLWmWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
07c02f25dbfaf204f2984432a3c293ef59d9f17f4da91b04e99cf22e04c08453.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections