General
-
Target
178ad9f87e2d5de16851cadee8e1b2d416e107477234793d2cb239e2e6abfde9.exe
-
Size
707KB
-
MD5
fa20d627b646cb3fdb50ef1424d3db4a
-
SHA1
ea4e8dc6894db201aab5ad45c7574cb9c6a436bb
-
SHA256
178ad9f87e2d5de16851cadee8e1b2d416e107477234793d2cb239e2e6abfde9
-
SHA512
a8060fab33b69b3552433fb1eccd8212efe7ad41061e8388104f24c79b859d8267f5cfaa0cb497928a6d0d4f3b0e207dd35113cced766f1a5c49f365fe5cccdb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8bvnh:6uaTmkZJ+naie5OTamgEoKxLWJLh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
178ad9f87e2d5de16851cadee8e1b2d416e107477234793d2cb239e2e6abfde9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections