General
-
Target
6c2658f00e5e621812197c5d43d68c2d1735cff386c3b40c26159c68fb4e0f66.exe
-
Size
707KB
-
MD5
c910685d99ae0fb2e4490f55e4ff7118
-
SHA1
86abb793532cadd6ace6c791122be78f7aed3548
-
SHA256
6c2658f00e5e621812197c5d43d68c2d1735cff386c3b40c26159c68fb4e0f66
-
SHA512
77d4884f83e5acf6b7212f8162965471d47f2cd1bdeea7c0e0b11ee1004c7ab06209bc870750b7b6b09c98e125671a6a123f9367c875ced38a580da9730987e3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y89vnh:6uaTmkZJ+naie5OTamgEoKxLWBJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6c2658f00e5e621812197c5d43d68c2d1735cff386c3b40c26159c68fb4e0f66.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections