General
-
Target
676cf72e963e98b1f4a6f51e77918edcce914b412447ee00df39d5fe363766cf.exe
-
Size
707KB
-
MD5
17c701e1efe94200a945280bd3e42de8
-
SHA1
75825c663c26ef2ad9f9c56e0062e11068827599
-
SHA256
676cf72e963e98b1f4a6f51e77918edcce914b412447ee00df39d5fe363766cf
-
SHA512
dc9d390f66c1d27e37d946094cb883b588816cc223fc59fe5e5cc56d01babd62c14277200021c44bcff5503cd4661e537f882b257e0fe7f285f0afb8333c1404
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8Yvnh:6uaTmkZJ+naie5OTamgEoKxLWrmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
676cf72e963e98b1f4a6f51e77918edcce914b412447ee00df39d5fe363766cf.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections