General
-
Target
67e1933e2c93c11461a971ff3c5bb58683ed71a87f3d907268e2180b12d0292d.exe
-
Size
707KB
-
MD5
6e207953adf761d896dece4deb921b5f
-
SHA1
5640db8f0c73bbbc109b4e9b011a42b3a2155735
-
SHA256
67e1933e2c93c11461a971ff3c5bb58683ed71a87f3d907268e2180b12d0292d
-
SHA512
c1b05fe91f818fa45571ea0921e2cdcbcc0b1474e1934e16d01970541abbb84f6c05a106347fc895577d2c2ace61c9210d2053e52155c88161a0993174c16302
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G85vnh:6uaTmkZJ+naie5OTamgEoKxLWt9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
67e1933e2c93c11461a971ff3c5bb58683ed71a87f3d907268e2180b12d0292d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections