General
-
Target
7490330deaaf545766d8ab4d03510e24e6ca5453e103f24e3bb666004e75e380.exe
-
Size
707KB
-
MD5
f70fd5bab8407357a0d61f499440eee2
-
SHA1
0c6fdbde6e1cfa9aa61a380ab4578aa4208db21d
-
SHA256
7490330deaaf545766d8ab4d03510e24e6ca5453e103f24e3bb666004e75e380
-
SHA512
8890097026ee0b9e755fbc06c15c370a46017b8d1bf0998a29277da5973fbdb53e463c507c42a2c8e28174fbd57779fd814fc1c6ed412653477854272dfa9f34
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWcRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7490330deaaf545766d8ab4d03510e24e6ca5453e103f24e3bb666004e75e380.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections