General

  • Target

    4fc06a3053d3515c310eb134be3e9f28152fef52976af5c5f6d7ecfa9aa89073.exe

  • Size

    707KB

  • MD5

    1bcd8e3a9eb4556413e5ce7ce8480a27

  • SHA1

    aa248791d01798278e910a61f4935de49e7090fe

  • SHA256

    4fc06a3053d3515c310eb134be3e9f28152fef52976af5c5f6d7ecfa9aa89073

  • SHA512

    08b85fccdfd767b441c6459ad2284bd36dd2909272cbe3c6f752e5d9f0d6b156688c14d3e56095daa82e638a8c43fddfdc6213b449cbaca17fcc6ab0deed6856

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q83vnh:6uaTmkZJ+naie5OTamgEoKxLWRfh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fc06a3053d3515c310eb134be3e9f28152fef52976af5c5f6d7ecfa9aa89073.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections