General
-
Target
0f808f41bc6305c348dd7c9df02ea67e724f4a54f2d2c43c2aafe5cba43d60e3.exe
-
Size
707KB
-
MD5
160cc297a8ad7f39c5377a64198af29f
-
SHA1
927087adbf26776c51e53714fb1a7573b14f35c2
-
SHA256
0f808f41bc6305c348dd7c9df02ea67e724f4a54f2d2c43c2aafe5cba43d60e3
-
SHA512
8aea9e99d3f5cf35e460f9ae0cd62d1d0b643b911c46799049ff46cea4edfffef5a716b145aa0807bc8fec8caf0e513a4bd6e7f499efbefa01c48dd1f31c46d8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWGEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0f808f41bc6305c348dd7c9df02ea67e724f4a54f2d2c43c2aafe5cba43d60e3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections