General
-
Target
260a4112506b82b39769a64e5ed57f10d3ff42878dedf78dad878c2cb14a856e.exe
-
Size
707KB
-
MD5
58f65e93ccd2c78a7de0b94443bed0d1
-
SHA1
c3face6ae56a7e1d64498170a2bc3631b6a8087e
-
SHA256
260a4112506b82b39769a64e5ed57f10d3ff42878dedf78dad878c2cb14a856e
-
SHA512
1a6350bd96ce921926fbb9144d42c76a04389f9b8e8258d680a69d0ce0a63d8aa669a14cb3523848fa09e603b767509f209a76e8abcbab909843ad9ca2e6f7c5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8qvnh:6uaTmkZJ+naie5OTamgEoKxLW9kh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
260a4112506b82b39769a64e5ed57f10d3ff42878dedf78dad878c2cb14a856e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections