General
-
Target
66fa892e9ef773b0ccad0cde3530fb42af22cab9ebdbdc01903d79148b241450.exe
-
Size
707KB
-
MD5
87be33db76450a208f3810e3bc781719
-
SHA1
9c0d0f01d092605a5f1fffa2da70de2c89e0abfc
-
SHA256
66fa892e9ef773b0ccad0cde3530fb42af22cab9ebdbdc01903d79148b241450
-
SHA512
855ecfe7fd570f6724272717a0a0e2ec3d504bef13f26c35374984ee3a5d1ade2a267463fe87d82ad6d4329db62840c9291d85e2f225b6985f7c12fdcc17b8cf
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWjEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
66fa892e9ef773b0ccad0cde3530fb42af22cab9ebdbdc01903d79148b241450.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections