General
-
Target
1690d849bc7d607968f2b1cf08fb478f2142405bc91a885c88789115ae8e61d3.exe
-
Size
707KB
-
MD5
695194dbe2d842aa8ab5e66a905772dc
-
SHA1
d6c71ede8a106fe40f27bafda07e494829c0c7c5
-
SHA256
1690d849bc7d607968f2b1cf08fb478f2142405bc91a885c88789115ae8e61d3
-
SHA512
9bc152758b4c957221c0c8442c5db8ed9929d9d7ff7cc7d508583215eb7388b51bb4f6bc1e1ce809c41f4aca9b30f9a6b64d3403a555f81e27a8f66c9dd992f7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148hvnh:6uaTmkZJ+naie5OTamgEoKxLW71h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1690d849bc7d607968f2b1cf08fb478f2142405bc91a885c88789115ae8e61d3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections