General
-
Target
7835507c2c0f06a7de32500cdc172b4296b61e3653f2fd1450b201a41929c9e2.exe
-
Size
707KB
-
MD5
51fa857a78111c68c28b45b181f1a35f
-
SHA1
505ae4c9a6cef6563bf56c960f741d521bf5f693
-
SHA256
7835507c2c0f06a7de32500cdc172b4296b61e3653f2fd1450b201a41929c9e2
-
SHA512
c72aafab76f0fc1a67a63611ff2211aaebdddf0fb68bd9008509895905eb27885488d8a1718f27c3d21d7ab17f201bc9a3d61e9659c899ac95f3f13d8e8febf2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148Kvnh:6uaTmkZJ+naie5OTamgEoKxLWzEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7835507c2c0f06a7de32500cdc172b4296b61e3653f2fd1450b201a41929c9e2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections