General
-
Target
725c35a960a26cce75dcb8f58ae11263c39c480ad917c9952fc0a5ff83ad32e9.exe
-
Size
707KB
-
MD5
6f5f7a8f4240c7f52568a7d395524041
-
SHA1
41c0aa9467b86569ccbab39d3e6f59a6b9486f50
-
SHA256
725c35a960a26cce75dcb8f58ae11263c39c480ad917c9952fc0a5ff83ad32e9
-
SHA512
080cbc05bbece5eb9ae3975c9ecc64fd53e7572ce255abef26edc5fe03215044cccdb97047691972c2bf8a7c1db63769343082cf8574b2f6f6cffc853624b28f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Gvnh:6uaTmkZJ+naie5OTamgEoKxLW84h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
725c35a960a26cce75dcb8f58ae11263c39c480ad917c9952fc0a5ff83ad32e9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections