General
-
Target
7202065d3746109db9e7945dafd280f542993d46106697c8a3c083f6bcc9ab17.exe
-
Size
707KB
-
MD5
934fe56b3563d5a48ede90c8f59b6414
-
SHA1
030dbd6593f1c3086b7f43c545040a6ec7971b70
-
SHA256
7202065d3746109db9e7945dafd280f542993d46106697c8a3c083f6bcc9ab17
-
SHA512
7b6f3e10134d2bab6a0a9f2b69d78ef19f223a5d9cc8fec37c991973cc70d494e05704fe0039380f54cb45b13387deb2c68035e133e9904c06f6438985d222ee
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8Gvnh:6uaTmkZJ+naie5OTamgEoKxLWG4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7202065d3746109db9e7945dafd280f542993d46106697c8a3c083f6bcc9ab17.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections