General
-
Target
67424d4bc4ef58d17a1c7d33646949118764b3fde2373e098288e9a68a9dd636.exe
-
Size
707KB
-
MD5
fd5ae2269fc028c7c0a07271cba903da
-
SHA1
82cee2be787714d6ae1d02210f308752e70e3654
-
SHA256
67424d4bc4ef58d17a1c7d33646949118764b3fde2373e098288e9a68a9dd636
-
SHA512
ee42f112f57915c5c060b78e0e810a4acf1359cb3da308efcf6dae868f589da2e6cce897a86492d0e84757d66443adb3a3071a3aa24b251628192b2f04d830b0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8ivnh:6uaTmkZJ+naie5OTamgEoKxLW9sh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
67424d4bc4ef58d17a1c7d33646949118764b3fde2373e098288e9a68a9dd636.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections