General
-
Target
6ba394beeb9e2b7f4eda9ea08f6d37ee39578bf2daf784e1c2fd746212826cea.exe
-
Size
707KB
-
MD5
629eac09e8eff55caa7b01ec3559f3e0
-
SHA1
973a09a50efab2b1f1ebb756f86438f6222f37c1
-
SHA256
6ba394beeb9e2b7f4eda9ea08f6d37ee39578bf2daf784e1c2fd746212826cea
-
SHA512
2773c0bb26634677f9d8b82a92adae4e5035c829af32b7aeddb6e946ebe79d2af7702e5f2481e187f2badf5e30502fc2d0aa078bf7a47325cae93f67b3bbc089
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8qvnh:6uaTmkZJ+naie5OTamgEoKxLWykh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6ba394beeb9e2b7f4eda9ea08f6d37ee39578bf2daf784e1c2fd746212826cea.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections