General
-
Target
639e3cff14680d1a7b25773b32be3a7e2a96b779a7f3bfc3bdb7cbb5dd858784.exe
-
Size
707KB
-
MD5
d4f1e4caf3d9fb74ecdccc11662a3cec
-
SHA1
26f09ca7eb00fd1b972c399280d42c7eeac1dc24
-
SHA256
639e3cff14680d1a7b25773b32be3a7e2a96b779a7f3bfc3bdb7cbb5dd858784
-
SHA512
82a270ce0df5adc53db75d0df2605916417dc7523960ccd9da35fff31d0bfceb55d22b6e71a779a1f996bf239d1212f969f7fe345b925a629071a2dc6d0d3d1a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138vvnh:6uaTmkZJ+naie5OTamgEoKxLWenh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
639e3cff14680d1a7b25773b32be3a7e2a96b779a7f3bfc3bdb7cbb5dd858784.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections