General
-
Target
1dfabcca9f49e3682db243a5d38779ac3ef52993e05eebc7fe8495576c2d359d.exe
-
Size
707KB
-
MD5
8e6a1d65327c9ab27e098c92c8e539e5
-
SHA1
3ca7d0ddccedee24de32b1adc01ebfb357c76921
-
SHA256
1dfabcca9f49e3682db243a5d38779ac3ef52993e05eebc7fe8495576c2d359d
-
SHA512
e231cbbab66c6b6a1cd235f0b84d5e51167c0839a4122a7b6b20dc841d2fd2f8e9f777938b9d0a4222991b6b4ffc94d6256f01a44cfe9fb51b1de13b24dbd3bd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8gvnh:6uaTmkZJ+naie5OTamgEoKxLWE+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1dfabcca9f49e3682db243a5d38779ac3ef52993e05eebc7fe8495576c2d359d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections