General
-
Target
1f8f8d145a639a5b2b0944fa723e528c9731eeb5b8f2cd241d7ca8a2fc83ccb9.exe
-
Size
707KB
-
MD5
4235afea7429fd881867e3d36f655549
-
SHA1
f1b388bf2fbc670477162f526b7d4a08b5e01cbc
-
SHA256
1f8f8d145a639a5b2b0944fa723e528c9731eeb5b8f2cd241d7ca8a2fc83ccb9
-
SHA512
d453115d078f8eadace1a32a006825946e04af548a0c833a00cbe2efd27f92500555d4dbf8cb9cb34b04718103c7c026e92b127dcad2834bfd817be55b8b5b6a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Evnh:6uaTmkZJ+naie5OTamgEoKxLWW6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1f8f8d145a639a5b2b0944fa723e528c9731eeb5b8f2cd241d7ca8a2fc83ccb9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections