General
-
Target
78d105449e0167589ed08f930f3611789c0ebeb2ad6ce2565f177144be1b2a4c.exe
-
Size
707KB
-
MD5
f060a21829cba38080850ef99a732092
-
SHA1
0e409a9646ad0570cfda6be12539dbfc0617e3d4
-
SHA256
78d105449e0167589ed08f930f3611789c0ebeb2ad6ce2565f177144be1b2a4c
-
SHA512
cf6570e5ec14d766855c01daa3330626f40bb7c5d039c9ae21a5483889cf3463521f92ea4f14740a1267dd3fac67aded16535901fcd6f8d962984411ccbe1449
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8cvnh:6uaTmkZJ+naie5OTamgEoKxLWICh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
78d105449e0167589ed08f930f3611789c0ebeb2ad6ce2565f177144be1b2a4c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections