General
-
Target
70e85f0650329836af8e7546c80564ddde02b74590f15766ac4e855b4e08f718.exe
-
Size
707KB
-
MD5
9c603d0c217323cd8836b1e3db39803c
-
SHA1
cf1c44f1b37fb9f4e0affdc75bbfe6ee1c8578ed
-
SHA256
70e85f0650329836af8e7546c80564ddde02b74590f15766ac4e855b4e08f718
-
SHA512
ae87417e6e018d17931b24be4e06a4ccb895afbba70f28adc32820316cced98b4b55b382a640ae3497fba9f0314800bc9ae5ff0ab0a754ac537ffeaccb5f646f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8avnh:6uaTmkZJ+naie5OTamgEoKxLWM0h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
70e85f0650329836af8e7546c80564ddde02b74590f15766ac4e855b4e08f718.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections