General
-
Target
78548c225888a0fb38c988621497bc0cd14810aa5aac05eb85c3a09b0b450dde.exe
-
Size
707KB
-
MD5
c48a28c33e7ee78d4c3b276630b047a4
-
SHA1
364d872a5edc4d10d775de9164f6efe50def6776
-
SHA256
78548c225888a0fb38c988621497bc0cd14810aa5aac05eb85c3a09b0b450dde
-
SHA512
576447126979a5bc4db5ded6c024d8bd12dba15d8f47a30cf8b930bcc5420e55f983dd9cd8a8205bfb84154ae07669eff9b98eff314dc65d7bf9fc6c73137fd5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8cvnh:6uaTmkZJ+naie5OTamgEoKxLWnCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
78548c225888a0fb38c988621497bc0cd14810aa5aac05eb85c3a09b0b450dde.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections