General
-
Target
26a7a92658708480c9168068fbc0469a9479857dd316e08b3081a6776ba222bc.exe
-
Size
707KB
-
MD5
bdee24ac61137aff33d274352fd762fc
-
SHA1
4f2492bb2e58ec2204c4573d1cfd6ebe0fa34902
-
SHA256
26a7a92658708480c9168068fbc0469a9479857dd316e08b3081a6776ba222bc
-
SHA512
8cedd886b9ecc86ca82e76d652a4038b2337166b982870db56c46f4b901df7247e76836afae673ef303df3886e8d1e2c66c1937eebe2d47a3da59b5200aa3c85
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWKoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
26a7a92658708480c9168068fbc0469a9479857dd316e08b3081a6776ba222bc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections