General

  • Target

    7766bbab993203e68bd6f919a702322bd596f460755decaf4b498a6e5fd13b2f.exe

  • Size

    707KB

  • MD5

    572668ffe04c00d16ac4b9f8c7b75d6d

  • SHA1

    fcd32ffc0b42d290ecdbe131959d70cd86ce27e8

  • SHA256

    7766bbab993203e68bd6f919a702322bd596f460755decaf4b498a6e5fd13b2f

  • SHA512

    6b8d18fc8539c1fb5549710841fd9c66269f59bc8b5315f999bb67a33960a67149324bdbf9e9bf2ad59ef1d8b7ce907d33cc2d80428ea2e9bc5c011632bf1587

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8pvnh:6uaTmkZJ+naie5OTamgEoKxLWxNh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7766bbab993203e68bd6f919a702322bd596f460755decaf4b498a6e5fd13b2f.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections