General
-
Target
26f61efbf3eb561a77d68ad0b33683b5fcfde051d68fc33046264e90c6b72b68.exe
-
Size
707KB
-
MD5
bce66f8faddf4e015b78b5b7909ec9f1
-
SHA1
3c85b1d32a3020cb79ad88ca21d33e2225f4242f
-
SHA256
26f61efbf3eb561a77d68ad0b33683b5fcfde051d68fc33046264e90c6b72b68
-
SHA512
e6ac81619b3d3a1e915a7c2048ad5fdbe996620a8dd14a4c9fe8adc4715d2217e0f9679a349c1f88eba33bda9ddd007e153f350765fbe615951d7de1b3e91b83
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8ovnh:6uaTmkZJ+naie5OTamgEoKxLW1Wh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
26f61efbf3eb561a77d68ad0b33683b5fcfde051d68fc33046264e90c6b72b68.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections