General
-
Target
67dd302cea0d74c711a9c05fc2e06e070eea8bc7128d629699579914c62ae8b7.exe
-
Size
707KB
-
MD5
575e55cc4b20dc28db48cd1808a1a839
-
SHA1
4d8aa6fc76e10421f3228bd2dbb858f2c8feea7f
-
SHA256
67dd302cea0d74c711a9c05fc2e06e070eea8bc7128d629699579914c62ae8b7
-
SHA512
7feb4b66a7b3446a0c200aac89671227735a077d60a908a583265d7b5b8a06120783829a418c7ce23ac4d09ab4c3caf8ab8af1fd03b3d0ce509ffb3b772d2a1c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R83vnh:6uaTmkZJ+naie5OTamgEoKxLWcfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
67dd302cea0d74c711a9c05fc2e06e070eea8bc7128d629699579914c62ae8b7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections