General
-
Target
6401f8eb56a6e5319a35d741afd06064d7d1dc0fa1de14c0d3535143cca81c03.exe
-
Size
707KB
-
MD5
716b47dc405d9666a9dbb9a8b0125ba1
-
SHA1
9b48623364682a39588f503b61749ca0576b0edc
-
SHA256
6401f8eb56a6e5319a35d741afd06064d7d1dc0fa1de14c0d3535143cca81c03
-
SHA512
90ee2f78c7f1588d062665c093b00e7aee0fbcf267b5cf1ca38d8947a448e76bde6da2ff75b6daae3eb0dad7fabc8ce456f387a0078ab08b93e7dfd3643473d1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158Nvnh:6uaTmkZJ+naie5OTamgEoKxLW85h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6401f8eb56a6e5319a35d741afd06064d7d1dc0fa1de14c0d3535143cca81c03.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections