General
-
Target
072da52d751eeaa25f13df8849f81f59c35f6c6e8f808c866e60317fed4b2dd9.exe
-
Size
707KB
-
MD5
944dc8f66be7e7d8da5791eb688a4dcb
-
SHA1
9f59dcca55c331566546ecf2f49e2ffadb3ce4bb
-
SHA256
072da52d751eeaa25f13df8849f81f59c35f6c6e8f808c866e60317fed4b2dd9
-
SHA512
03dc8a5c5064bd7956218f76cc38aafc75558264754bf45a7e9cdbff0f6697872baf9c03261f5270400e4fda0924917e89bacb047386c60ef6816b69106d3995
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/8fvnh:6uaTmkZJ+naie5OTamgEoKxLWO3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
072da52d751eeaa25f13df8849f81f59c35f6c6e8f808c866e60317fed4b2dd9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections