General
-
Target
0f81a99c2edf96b47b8394b0a4eefe28b31b7b2db75c4a15b2545c1e78863155.exe
-
Size
707KB
-
MD5
f567b120e7b64b799eae70136fbb5f24
-
SHA1
8fc421de23052119d6820ad9a8214a922af45152
-
SHA256
0f81a99c2edf96b47b8394b0a4eefe28b31b7b2db75c4a15b2545c1e78863155
-
SHA512
37ea1779749e3a2b145f10f93e7a9931eace9c4ef8874fabc67738d6af8edf1a6b870ce0f66e93039e144a7dae53d676838d43f29ccba0dbdc458f6fbaa4b3b3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1788vnh:6uaTmkZJ+naie5OTamgEoKxLWyih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0f81a99c2edf96b47b8394b0a4eefe28b31b7b2db75c4a15b2545c1e78863155.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections