General
-
Target
70ff29eefdacc30e453ecbe55bc5b4638948c7765018a8922cb51fbd32b9070c.exe
-
Size
707KB
-
MD5
54b2c084a8e40d937de2961fb7a0073b
-
SHA1
c987ff023f221ebfda518c8fba85f76ba96e48da
-
SHA256
70ff29eefdacc30e453ecbe55bc5b4638948c7765018a8922cb51fbd32b9070c
-
SHA512
471ac745159a4c01acfe8361519d040f752cfe0a454a0920eb8da99283c79591db4708d203b8b20d261f4836645bbb7865c1f7e7278559797507159c231d5042
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R8hvnh:6uaTmkZJ+naie5OTamgEoKxLWk1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
70ff29eefdacc30e453ecbe55bc5b4638948c7765018a8922cb51fbd32b9070c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections