General
-
Target
77226525913221f9bc1337dba3bfa97296a9b405a764d02d78c3fc55a507405d.exe
-
Size
707KB
-
MD5
a693adb796c3660754a7ef75f654bb04
-
SHA1
0ce0453d17adea4dbb3e1e3038b3d2fa1f04fa7d
-
SHA256
77226525913221f9bc1337dba3bfa97296a9b405a764d02d78c3fc55a507405d
-
SHA512
44135dcdab45e2c2fb7bc3ce7c09a4b78abbfebd3aa2a12018f17157d85ec749baee08f215f50c13351a667881e6daeb08d83497b8d83f37377a58e341476112
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1V8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWgdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
77226525913221f9bc1337dba3bfa97296a9b405a764d02d78c3fc55a507405d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections