General
-
Target
1fe620bb1c95ac4dc554a72fa39e4ed7bf13fad42a8d1316803e4c07ddb2c5e3.exe
-
Size
707KB
-
MD5
2fbf624bdd71d1e7d5d7d635de65a918
-
SHA1
ab0547f2fa9bc66b9b8a4747cf68440ea91376ef
-
SHA256
1fe620bb1c95ac4dc554a72fa39e4ed7bf13fad42a8d1316803e4c07ddb2c5e3
-
SHA512
a1f6a9f7e344a992106bf020f7a32b6a467340ef57576211cbb01750063a1a3e4d6d6f929991841f8b4c7ac592aa5e517557d327116657a8360c247bf4c4d8b1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s86vnh:6uaTmkZJ+naie5OTamgEoKxLWfUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1fe620bb1c95ac4dc554a72fa39e4ed7bf13fad42a8d1316803e4c07ddb2c5e3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections