General
-
Target
607d14ff15755a6e0c23b25a1b4802d2fb74ddad2722b5ca4df2bc1f406d4065.exe
-
Size
707KB
-
MD5
7b12d799f5e5dcfaadaed248d4581089
-
SHA1
2c360b6d7855a33d8d0ac69dea9032c444a1b70a
-
SHA256
607d14ff15755a6e0c23b25a1b4802d2fb74ddad2722b5ca4df2bc1f406d4065
-
SHA512
3c2e41a46589c64f17aa755454e3fec424b9e51369cf2812f6a41ae0516f1f76b1c7deee9020018898853a148f23db0dc40bba61ca7c30f344fba49bb4a46811
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8svnh:6uaTmkZJ+naie5OTamgEoKxLWRyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
607d14ff15755a6e0c23b25a1b4802d2fb74ddad2722b5ca4df2bc1f406d4065.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections