General
-
Target
7865e7fd241f2d25a1d8912196e5760348071b26d32c4ca1b4e237ff2f7008b5.exe
-
Size
707KB
-
MD5
394f1f4b9267c84efea8559d06f862d7
-
SHA1
121b85a1b7f414194b0d3bcbc4207edb77824204
-
SHA256
7865e7fd241f2d25a1d8912196e5760348071b26d32c4ca1b4e237ff2f7008b5
-
SHA512
3294b7ca5d65ba030809b23c26a64c68bd9f739ef3ea5fd34f38c0d942b0cd5b29dc7b518b956072bfe91a95a82bab53b5b1689044e4026c5885410184e203ee
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1e8hvnh:6uaTmkZJ+naie5OTamgEoKxLWl1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7865e7fd241f2d25a1d8912196e5760348071b26d32c4ca1b4e237ff2f7008b5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections