General
-
Target
66474f9e8e8fb1ebb0fbeb0d9b187cb88c241b348f03fd7596e0b5a9cc48646b.exe
-
Size
707KB
-
MD5
fa0e871cd5195388b93fca4d81680a73
-
SHA1
41a374dd8dc2d1adedd386e468a00069c9f38ef0
-
SHA256
66474f9e8e8fb1ebb0fbeb0d9b187cb88c241b348f03fd7596e0b5a9cc48646b
-
SHA512
46c428e9eb58dcd86237b8dab4bd1c7366ec989adb1a6da1e30ef0785062ee4fe4e7d57e53e51d6d2cb4635ac3326bcd9d7a804be190c392d816b2f85305b204
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1pP8hvnh:6uaTmkZJ+naie5OTamgEoKxLWH01h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
66474f9e8e8fb1ebb0fbeb0d9b187cb88c241b348f03fd7596e0b5a9cc48646b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections