General
-
Target
68b146d6025d4169870af4d7ae39bafe70c6a7d0766e9006e09d266bceab1cba.exe
-
Size
707KB
-
MD5
8e5a2bf7cd9d31d71c4a01cdcb554daa
-
SHA1
271e70c7768c371067a65046fa21985bd5ce006e
-
SHA256
68b146d6025d4169870af4d7ae39bafe70c6a7d0766e9006e09d266bceab1cba
-
SHA512
a2edbe9439399f047d4b267cbc2d519ad71dfd58832462a08c7551b4e29e24b4d80d951609d9dd61688debc0fef73611c2662e09f82b5cb81700ac806f56e408
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148+vnh:6uaTmkZJ+naie5OTamgEoKxLW7gh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
68b146d6025d4169870af4d7ae39bafe70c6a7d0766e9006e09d266bceab1cba.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections