General
-
Target
6607b3bc6ddd08d0ca33c2dd56e7a24216f315bab62eb90a53b54ab9a0e4eae4.exe
-
Size
707KB
-
MD5
aac1e4da9fe79398950daae4483f052c
-
SHA1
5a29a1c32fcbefec145e0cbeb6ac263d374dca5f
-
SHA256
6607b3bc6ddd08d0ca33c2dd56e7a24216f315bab62eb90a53b54ab9a0e4eae4
-
SHA512
dc0246911b2f8d44b99141a51a559dbec3680d27d29d830af10ca5e28f9caa4a4cff5db3adc4e8b66ea37e2c055ce374e0ebe92484d5af0a6bb763287e0bc694
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8Mvnh:6uaTmkZJ+naie5OTamgEoKxLWcSh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6607b3bc6ddd08d0ca33c2dd56e7a24216f315bab62eb90a53b54ab9a0e4eae4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections