General
-
Target
1dbc5c8b66fcc1ce2f96cad90e4ffc63bf7340d236f996a41192e0be958303b8.exe
-
Size
707KB
-
MD5
76c8faacdccea0bfab7e78381f1dbddd
-
SHA1
bebf520e4bee66d30e5948f974318ab5f8e14166
-
SHA256
1dbc5c8b66fcc1ce2f96cad90e4ffc63bf7340d236f996a41192e0be958303b8
-
SHA512
735ae7eccb5ee2a327ba44e8d83a69deda79b6fb49a9cc0299a5e99bfdbf180525586f4a1c471cd0cbe04ea87a178ca29225748558977c054c0d4a0ee33f3887
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8evnh:6uaTmkZJ+naie5OTamgEoKxLWYAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1dbc5c8b66fcc1ce2f96cad90e4ffc63bf7340d236f996a41192e0be958303b8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections