General
-
Target
672590f3e575b04c6cad88d700355fdd4c04a1dbd165c86a1a6cf61386c159f6.exe
-
Size
707KB
-
MD5
a9a9e68d3cc9cba72e7e2e8872f74341
-
SHA1
9ae68a7bfc1f451ba0a1d63fbe0622707c844722
-
SHA256
672590f3e575b04c6cad88d700355fdd4c04a1dbd165c86a1a6cf61386c159f6
-
SHA512
700f2204e83e7887e8426a7d954d9724b3fd81cde94127d96985bf826ef9306f2cd2a62ac266a4dcb1ea35a2b1481e50b5407d6474b3d15afb10d74894dfc18a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8avnh:6uaTmkZJ+naie5OTamgEoKxLW00h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
672590f3e575b04c6cad88d700355fdd4c04a1dbd165c86a1a6cf61386c159f6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections