General
-
Target
4eb6c2e0609240e614f1963abb982e2a212928c73cd1a57a8e1c3244825fafd9.exe
-
Size
707KB
-
MD5
d1f04c74b2d72b41b52938b169584222
-
SHA1
95865575a7b969246f4388967f3e9b5e979576f3
-
SHA256
4eb6c2e0609240e614f1963abb982e2a212928c73cd1a57a8e1c3244825fafd9
-
SHA512
30c9cf92a2f186e2f46cf60467728e776682b2a6faa6c0cafa211f37c37afc53036e170db4963d1e76ae3f7d3fd87d5036f4b47ccfa08c68335c4cbd797d792c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWWoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4eb6c2e0609240e614f1963abb982e2a212928c73cd1a57a8e1c3244825fafd9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections