General
-
Target
4f8b677628cc31bdb256ecc181f2fcd28dab290d312efa18ade1a22b4e16dd68.exe
-
Size
707KB
-
MD5
d1d4208422453697801f0979d6f26201
-
SHA1
b553de0751096f4a84b561ca90ce262eb3900df9
-
SHA256
4f8b677628cc31bdb256ecc181f2fcd28dab290d312efa18ade1a22b4e16dd68
-
SHA512
de804e1485a535f47b11a102dcb6c648ddffe89864c5d09a6a0aa56eae0e3356370456f1f6ed3715f6590a59d6e5afda7923f37bdebc874813c02d7013452e1b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8ivnh:6uaTmkZJ+naie5OTamgEoKxLWpsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4f8b677628cc31bdb256ecc181f2fcd28dab290d312efa18ade1a22b4e16dd68.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections