General
-
Target
6b2f7aca27dd0de54c16076df6989c3d04fba41f7d799ba380c761f835fc4d15.exe
-
Size
707KB
-
MD5
c879a63cf4610c0391710f368f0fa7db
-
SHA1
567fdd1d4f904a7eb2fb9fa586b84af5a01f0a5d
-
SHA256
6b2f7aca27dd0de54c16076df6989c3d04fba41f7d799ba380c761f835fc4d15
-
SHA512
11b981074b80df2b8bb7bc07a8e77c1a00409c9d983b36ead2fc296585f98f7a6f29b98c32099ced2424549be3e5adf2adf1102c9ff9750c12c4934d5633f39e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Jvnh:6uaTmkZJ+naie5OTamgEoKxLWHth
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6b2f7aca27dd0de54c16076df6989c3d04fba41f7d799ba380c761f835fc4d15.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections