General
-
Target
194d037df7f5c96c7345c753c0e07023dd7b477f6065436955cf2b379d5858c1.exe
-
Size
707KB
-
MD5
427d84f5ce7d3d4570ac7382d0bc0bf7
-
SHA1
9e562907cddc1f03138e058ba0806d32d5347f37
-
SHA256
194d037df7f5c96c7345c753c0e07023dd7b477f6065436955cf2b379d5858c1
-
SHA512
5d11c63834b05cf9a48e80f7ddef95768757d40783a06a6c3d632591520ffd72883d26a39ea61bd407e936b415354238fc4df42d93483a4702affb09aef947e6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8dvnh:6uaTmkZJ+naie5OTamgEoKxLWrph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
194d037df7f5c96c7345c753c0e07023dd7b477f6065436955cf2b379d5858c1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections