General
-
Target
68e82a766faf86ba6c7a7cba77ebdd9ab28321a0b495c6ed544d14ba821ba453.exe
-
Size
707KB
-
MD5
5823275ba4a37c6f49d5ba05e7eb5337
-
SHA1
b40b79ec8b4d8eb63c47352f34a4cf1965c13dd3
-
SHA256
68e82a766faf86ba6c7a7cba77ebdd9ab28321a0b495c6ed544d14ba821ba453
-
SHA512
c305a70f8dacf84dff3e3c4c50c640a932c2f7a560517280a8ac902e72f9afc4a07cb889f4445e9f153cafe3af990dcd2d2069e73c5248a57e0869889763705a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWmHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
68e82a766faf86ba6c7a7cba77ebdd9ab28321a0b495c6ed544d14ba821ba453.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections