General
-
Target
74fc45ffa0bf16b02a9cee1db48d556e46898a338a46d8b26ebee9d8344c6baa.exe
-
Size
707KB
-
MD5
96845edbfcd9e5e95bef5bcd315da78c
-
SHA1
b233888749e2de3b13b738e291900d145b8cc168
-
SHA256
74fc45ffa0bf16b02a9cee1db48d556e46898a338a46d8b26ebee9d8344c6baa
-
SHA512
c8c69b5c84c32731b90bba26a9368fd08311e60289768ee66a234f68a5b5f26c43ad2c4862723de641901012d6a0da5a7acd774f22d675ef26eac50e639559d9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWnEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
74fc45ffa0bf16b02a9cee1db48d556e46898a338a46d8b26ebee9d8344c6baa.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections