General
-
Target
756571657150bec948ec58bdbd811e581333288c0df7b13482aee4972440571f.exe
-
Size
707KB
-
MD5
0bbdfcbd8c4e0700090666fb3d1eaac5
-
SHA1
cc65e522ad141c4038cf799151a906b67ea4f1fb
-
SHA256
756571657150bec948ec58bdbd811e581333288c0df7b13482aee4972440571f
-
SHA512
3d66c756e9de732b4221f6bcc4d7552cd6ecd2ce75ce80752b199a29d0bf7d606f0c722a1a9cabb22f8254fdc388bf7ad17c6932787c8c92259373e5a05ecc43
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1688vnh:6uaTmkZJ+naie5OTamgEoKxLWBih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
756571657150bec948ec58bdbd811e581333288c0df7b13482aee4972440571f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections