General
-
Target
061707752720cf501627a0b93bb8ac33579217c5885f8003ed5ec2a63342ace4.exe
-
Size
707KB
-
MD5
b28cc347df53f300bc8e940b40448277
-
SHA1
d468d6e5c6c031c0dbf03aaf9d70016f0e9ff6f5
-
SHA256
061707752720cf501627a0b93bb8ac33579217c5885f8003ed5ec2a63342ace4
-
SHA512
4cebdbab426201868f3d144209778c0d47af06f34c04745ec75fa1f9a444a435d990fd53e39d79ab118ff1e3738241f7e1b82e446d412a4ce0f513a65c941c57
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8tvnh:6uaTmkZJ+naie5OTamgEoKxLWGZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
061707752720cf501627a0b93bb8ac33579217c5885f8003ed5ec2a63342ace4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections