General
-
Target
0ab7904fd356fdc2d396f7b12120c4ada9a95cf5da2cd3e126a6416bef58d518.exe
-
Size
707KB
-
MD5
7c1141087a38e71bae148e86c5f80d3a
-
SHA1
78a042fc907113339acb063dc1565d48515c9ad7
-
SHA256
0ab7904fd356fdc2d396f7b12120c4ada9a95cf5da2cd3e126a6416bef58d518
-
SHA512
7f3c532b5f1395581485efa6aa97372e70a503b366d552f2ba204df4dd456517255781c16be4350e3df979a5cb30bd4fe61a3aa65a26d7d9f5a54f2838aaf3b5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8avnh:6uaTmkZJ+naie5OTamgEoKxLWh0h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0ab7904fd356fdc2d396f7b12120c4ada9a95cf5da2cd3e126a6416bef58d518.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections