General
-
Target
76b15a7a4e0e81a886adfc759cb9c8325ab39de05729cb506f6b6b07a0423d6d.exe
-
Size
707KB
-
MD5
ebb4de859a625a143193017217eaf2ff
-
SHA1
7a298599922ebed0694dd4cb920ac76f1b429329
-
SHA256
76b15a7a4e0e81a886adfc759cb9c8325ab39de05729cb506f6b6b07a0423d6d
-
SHA512
49841f753b8a6f8047be8644cc01a5d03f482201217f234f075cfc502f253ccc4f58cbb12c0499b4aff7589ba9ed267a17b6dd8e0bf9067a783d82e6d24d4989
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Jvnh:6uaTmkZJ+naie5OTamgEoKxLWGth
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
76b15a7a4e0e81a886adfc759cb9c8325ab39de05729cb506f6b6b07a0423d6d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections