General
-
Target
78ce92439e1a547662d250c9bb51928afa829d5bd3ab820f32bfd48dcc270ef1.exe
-
Size
707KB
-
MD5
f426f8190b551ab6cf513935b2a9079a
-
SHA1
c098e163791bea404302e1b24b1afe9bf73e409a
-
SHA256
78ce92439e1a547662d250c9bb51928afa829d5bd3ab820f32bfd48dcc270ef1
-
SHA512
d4eff9f0696cf5e4e8c72dbbd300d0c5b160e36343459642c9f8987fe1487e45a809e97265df45b6a3241aab6d15b194c7ece31cf9e9f1827e4126dd7919cd19
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8xvnh:6uaTmkZJ+naie5OTamgEoKxLWRlh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
78ce92439e1a547662d250c9bb51928afa829d5bd3ab820f32bfd48dcc270ef1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections