General
-
Target
6cdce613a7acf03a0270364823a61bbb8d47b82dc4dc0ef6164dd3e61ff4c0e7.exe
-
Size
707KB
-
MD5
d869fe4692652d61aff7ee2666c7a072
-
SHA1
92bda6ae3a343c01ea53c09d12b4ac5a429b0bc0
-
SHA256
6cdce613a7acf03a0270364823a61bbb8d47b82dc4dc0ef6164dd3e61ff4c0e7
-
SHA512
bfc9523fe155c6f2aa63fc4869bdf97fa9a5a20082960404ca54366292468f8b3d3546e8eed409e2f25fc5b33d5cc60f35712806b2ee44b105d4a1dad43d7273
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8hvnh:6uaTmkZJ+naie5OTamgEoKxLWe1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6cdce613a7acf03a0270364823a61bbb8d47b82dc4dc0ef6164dd3e61ff4c0e7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections