General
-
Target
78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece.exe
-
Size
707KB
-
MD5
a2d8014cbb987ae13c4c339e2f841975
-
SHA1
a353d4821ac451a8e9c284c951420417965081d7
-
SHA256
78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece
-
SHA512
ef0acbcb354dc1bae2676aa4a0f8f870cae454e81b22b88b4f329cb439b2518f836678be0692fb5b885a9eec8b6c54c79f01af1942443c31c3d97204da776615
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118jvnh:6uaTmkZJ+naie5OTamgEoKxLWADh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections