General
-
Target
72c87867b063fefaef92e2f322f76f4b00438a3b01d5b2e5275484660655f99c.exe
-
Size
707KB
-
MD5
393bfd6e375b284446bf8d0d451bd827
-
SHA1
3f6ecf2636c3acd030f8a53ff1745984907bd835
-
SHA256
72c87867b063fefaef92e2f322f76f4b00438a3b01d5b2e5275484660655f99c
-
SHA512
e61d410d016254cb7e57bc6821e341c07a9277c656f34afa948a441c7d227730c7ef39acff4544f372a0ed17334e7b8123da21671f18697b2956bc32d67bd0e6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J83vnh:6uaTmkZJ+naie5OTamgEoKxLWMfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
72c87867b063fefaef92e2f322f76f4b00438a3b01d5b2e5275484660655f99c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections