General
-
Target
6b7112a5d7fbf5f1e3a72b9a7fbe86117e164fc5cebe3301838fdb82123a26c7.exe
-
Size
707KB
-
MD5
d46f3e6ff71adff6b105ac94aba644f4
-
SHA1
ebabc3b2295831926626611d7872eab3729d7029
-
SHA256
6b7112a5d7fbf5f1e3a72b9a7fbe86117e164fc5cebe3301838fdb82123a26c7
-
SHA512
c51c0d36314a44c4bb2660a5acc2d38dbc24832eac444ac23126fa73adb6feb09528b8385eb765ba94c3cfacf11f8800126ab178e410efaeb30971215d259ad4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8Nvnh:6uaTmkZJ+naie5OTamgEoKxLWH5h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6b7112a5d7fbf5f1e3a72b9a7fbe86117e164fc5cebe3301838fdb82123a26c7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections