General
-
Target
796fc5ced3debd53f307bd4524f30ee9d0072f6031513c69849adb5bbdec7ad5.exe
-
Size
707KB
-
MD5
ab56250f4f8d1d13f5c4d0bb4e8327bd
-
SHA1
bb54375e51b9256758f90e0db8bc61fae9c4a99a
-
SHA256
796fc5ced3debd53f307bd4524f30ee9d0072f6031513c69849adb5bbdec7ad5
-
SHA512
d69918ab5aeb69fe688eb15c1f46d1ad5f45895672e6f95a85119ded7f8966a1f3de1b66507a6788f1ef6843ea24178a3884e686a2655e20d29cf2138974f04b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8yvnh:6uaTmkZJ+naie5OTamgEoKxLWMch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
796fc5ced3debd53f307bd4524f30ee9d0072f6031513c69849adb5bbdec7ad5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections