General

  • Target

    78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece.exe

  • Size

    707KB

  • MD5

    a2d8014cbb987ae13c4c339e2f841975

  • SHA1

    a353d4821ac451a8e9c284c951420417965081d7

  • SHA256

    78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece

  • SHA512

    ef0acbcb354dc1bae2676aa4a0f8f870cae454e81b22b88b4f329cb439b2518f836678be0692fb5b885a9eec8b6c54c79f01af1942443c31c3d97204da776615

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118jvnh:6uaTmkZJ+naie5OTamgEoKxLWADh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78388d9d586375c00ac02cb3f91cc9ff626e377fb2dab67b59b3c8a72ecbaece.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections