General
-
Target
71f0e5b7855ac006e71cd3d4a1c90816b6f604dd22289228c1d02b8e4e1c1ecb.exe
-
Size
707KB
-
MD5
e22809d525fa7b258f9eb56ab60695b2
-
SHA1
2f30899c3deb33fefcde724c976919807554d45e
-
SHA256
71f0e5b7855ac006e71cd3d4a1c90816b6f604dd22289228c1d02b8e4e1c1ecb
-
SHA512
4de34d59bd0a30b368042bdd3280e594d59e6fec7e120f10fd0c5fdb7b8d470ee1763dd5208bc00884b89dcac7a9559e5921758ec94648e8a3c85aaca5beaa34
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8mvnh:6uaTmkZJ+naie5OTamgEoKxLWCYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
71f0e5b7855ac006e71cd3d4a1c90816b6f604dd22289228c1d02b8e4e1c1ecb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections