General
-
Target
777ccd7a7d58dc7ba8f74f9568230120f82cb522a203098b2c3a5aba1da74a73.exe
-
Size
707KB
-
MD5
e5c1fbf6c4d402fbe1dfdc4ba7b6793d
-
SHA1
0c5cd66e8bc7f16a1dc370a62ca8eaed255e53fc
-
SHA256
777ccd7a7d58dc7ba8f74f9568230120f82cb522a203098b2c3a5aba1da74a73
-
SHA512
6fdfca65752dd35ff9017c36d1b34d0ab992551796686627e486118493ef6bbe36a5a5bcd0f8861194dcff2d1f5a0df4ca8746e844fbc35bd8278d4b10a6a2af
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/80vnh:6uaTmkZJ+naie5OTamgEoKxLWWKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
777ccd7a7d58dc7ba8f74f9568230120f82cb522a203098b2c3a5aba1da74a73.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections