General
-
Target
73981abb9743b26bce4e89d29c826254d50f9f2725c0803f580b2bf74933e85b.exe
-
Size
707KB
-
MD5
fd53c6e7a2751ebf5ecb0b55a467f187
-
SHA1
b823ffbd0f2c21d4301760f140f0b668abd09853
-
SHA256
73981abb9743b26bce4e89d29c826254d50f9f2725c0803f580b2bf74933e85b
-
SHA512
f78f8ea38a3dc7242f6f6f82e7ba563b7ce1318b24d24fbdf724176f4953af4da494c8a738b404cc4e4311ae396cabb53f247d78a9517510a36e18effecedd50
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8Nvnh:6uaTmkZJ+naie5OTamgEoKxLWh5h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
73981abb9743b26bce4e89d29c826254d50f9f2725c0803f580b2bf74933e85b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections