General
-
Target
6b4dea84d4bddf477a983834185f8b164cf8af32c51ef5799ff4b5c90376fe62.exe
-
Size
707KB
-
MD5
ab91652b741dcb4e594e28d94ad265a6
-
SHA1
e8a59f89812201e3996e671ca7454dcb56eba667
-
SHA256
6b4dea84d4bddf477a983834185f8b164cf8af32c51ef5799ff4b5c90376fe62
-
SHA512
ddd28e6278eda952830bd93d00974742ca40d15b878faa128e049eacf041600d76d3ec3a9b1b14c95a3adb58a5efbbb1fba7048ec0a8ac701f5357b1855e1be6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Lvnh:6uaTmkZJ+naie5OTamgEoKxLW0bh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6b4dea84d4bddf477a983834185f8b164cf8af32c51ef5799ff4b5c90376fe62.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections