General
-
Target
4fe0be41eb2869d5bdc52c367711b9c7c8ac64b1cdd33a706eaa9e55f63c56f4.exe
-
Size
707KB
-
MD5
58fd05de6670293561710eed40945919
-
SHA1
f926672cf606302a34084cdae548b16220d78202
-
SHA256
4fe0be41eb2869d5bdc52c367711b9c7c8ac64b1cdd33a706eaa9e55f63c56f4
-
SHA512
f99a51120e2ba891824ee6c04d457b04545d4d3876402a87ed665651c4397f231c2e90b4f6d2d64794d0d23b858c6307a62617d77d954a31ca712864aede2fdb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8gvnh:6uaTmkZJ+naie5OTamgEoKxLW1+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4fe0be41eb2869d5bdc52c367711b9c7c8ac64b1cdd33a706eaa9e55f63c56f4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections