General
-
Target
712ea86f9f29605a3ad804e65a2d5c62be09dd49dc68b24b4b9955b558c7b29f.exe
-
Size
707KB
-
MD5
1d30fcaa5fe26a11526955815caac676
-
SHA1
61b0dccd207e71a1a61e5824303937e3c7e59578
-
SHA256
712ea86f9f29605a3ad804e65a2d5c62be09dd49dc68b24b4b9955b558c7b29f
-
SHA512
3a0f97dc0a1008b8b851123954d8f51a78add8355eeab602f388fcaa464defbd5f761395af597f2a56b42b606562ab4eb61fae4756c89241b500a5861a3a08e7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8bvnh:6uaTmkZJ+naie5OTamgEoKxLWgLh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
712ea86f9f29605a3ad804e65a2d5c62be09dd49dc68b24b4b9955b558c7b29f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections