General
-
Target
792ffc316af49b835117d55b831c79bc54ad59fb3a31bfeea6ad004391ff9c7c.exe
-
Size
707KB
-
MD5
dafcadf1158fdc70555aed45498b1f1d
-
SHA1
996ed3a771c26cf22315274f78e263a2e6a34476
-
SHA256
792ffc316af49b835117d55b831c79bc54ad59fb3a31bfeea6ad004391ff9c7c
-
SHA512
d48b256f3a0926fee62b0dd9b234108c6bbd40383859ab13cb20ca7a5b1cfffcf90c736c2f9821b177580ae6ef53b51f257e0c5562b6a8de22ff0c33ee77b837
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza168Cvnh:6uaTmkZJ+naie5OTamgEoKxLWZMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
792ffc316af49b835117d55b831c79bc54ad59fb3a31bfeea6ad004391ff9c7c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections