General
-
Target
6feed2841f6f94eb1308d04f089162481002319e588067177af17ad90d7a5016.exe
-
Size
707KB
-
MD5
4c426c64f4b23c9863cdfeeccafad70d
-
SHA1
d2d2b94f1862e09e28280be1024dae76e5ba1edc
-
SHA256
6feed2841f6f94eb1308d04f089162481002319e588067177af17ad90d7a5016
-
SHA512
6558576303356d0b26ca9dc9ff28d0e308e9e6bf4fa26495d424563010ffae130cdfec8d03c7dfe139710a0e8bd6a0570186c0ea45b2fc22b5bd20db7aecb049
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8svnh:6uaTmkZJ+naie5OTamgEoKxLWOyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6feed2841f6f94eb1308d04f089162481002319e588067177af17ad90d7a5016.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections