General
-
Target
68a819db393ba6dff1be7e109452e9b5a4e6aac6b8c041236907af95a7cc866d.exe
-
Size
707KB
-
MD5
ee4b3b33f65de35a42c57ebf2808edeb
-
SHA1
2b74115f0806466b87399ac6e3766adb88c02bff
-
SHA256
68a819db393ba6dff1be7e109452e9b5a4e6aac6b8c041236907af95a7cc866d
-
SHA512
1503a4f7e5fdba4d5c0ae16f2cfb6ff411978696796e8f0d231dc2126693dced8f86600c5f419e3bf44d3e5f756a24c169f1476c534f15bf0d259511b7d99c90
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1283vnh:6uaTmkZJ+naie5OTamgEoKxLWFfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
68a819db393ba6dff1be7e109452e9b5a4e6aac6b8c041236907af95a7cc866d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections