General
-
Target
1f4ff147eb2e576c74188629552b49c616faf9dca9bcf24869b65e587a7da688.exe
-
Size
707KB
-
MD5
5b041a989e82b045e0d1cb5aa15f856c
-
SHA1
49c97d9d27b482cdc7324705dc28a50c8ce34cde
-
SHA256
1f4ff147eb2e576c74188629552b49c616faf9dca9bcf24869b65e587a7da688
-
SHA512
76d9bbaca7409e36ae81b6f127f3a7b21efc587f08fb7039ce7fdc37121b0e6d879d0fc744d4a0ca2afff346050f6b35c6996735a5d72448055cbb3a56fb1c2d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c8Yvnh:6uaTmkZJ+naie5OTamgEoKxLW3mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1f4ff147eb2e576c74188629552b49c616faf9dca9bcf24869b65e587a7da688.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections