General
-
Target
6b0dc898cb89d8bebd61024767019661315abf244838c4df57b59d06be21630f.exe
-
Size
707KB
-
MD5
1fe61c22eee2b7730b3c347fdaa8ffec
-
SHA1
080f265424ea424342a3fc0e07b575ab7bcc1d41
-
SHA256
6b0dc898cb89d8bebd61024767019661315abf244838c4df57b59d06be21630f
-
SHA512
f9151d143013c03f51a6cf1eae6154ed5e241def767cc1e922e00b24014b3eed7d2bb5715f034c3479d7c6ac58d0f5c7eec5591e899bc02e2ff38b698f475110
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8avnh:6uaTmkZJ+naie5OTamgEoKxLWp0h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6b0dc898cb89d8bebd61024767019661315abf244838c4df57b59d06be21630f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections