General
-
Target
64ce2a1377cab1acef6fafef690f8724d2792751ef4ba7b0205644d5dad7d675.exe
-
Size
707KB
-
MD5
6f94dc7844735b10b0d3f21a0e534923
-
SHA1
941705046aa0bed0a7fa71ed6e3bb4bea6544b63
-
SHA256
64ce2a1377cab1acef6fafef690f8724d2792751ef4ba7b0205644d5dad7d675
-
SHA512
c4dfa625161db5f413886e2d60172d5833e708a53ec57d155abc1105a6a7ae6d19ae22f396208abc5e27f9407943e5ce10a2954ce0f72a36619928ea57ac578a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t8qvnh:6uaTmkZJ+naie5OTamgEoKxLWAkh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
64ce2a1377cab1acef6fafef690f8724d2792751ef4ba7b0205644d5dad7d675.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections