General
-
Target
100fec9cd08ceda50b965fd46a8292db735eca51a51cf929c945970f88426d24.exe
-
Size
707KB
-
MD5
bd800a459066ca6850504da5175355c4
-
SHA1
9f616a17c7f4c55137d92564f1806822edf4c67d
-
SHA256
100fec9cd08ceda50b965fd46a8292db735eca51a51cf929c945970f88426d24
-
SHA512
815c1c31e3d44e1f2ec0770d9edbbb6afebe85391839a6daeba7254cd623ee6ad46b4b6ba784d7a3ead27d40406c11a8c99dd6415c39b85d4de456acb5a0c87d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1487vnh:6uaTmkZJ+naie5OTamgEoKxLWbrh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
100fec9cd08ceda50b965fd46a8292db735eca51a51cf929c945970f88426d24.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections