General
-
Target
79eb3ca7911f4bb55139944e3a175791f60f71d48b7c9aeda3d2d9459407204e.exe
-
Size
707KB
-
MD5
62a5e9d17750a1f2143b3b6ef9c66a2b
-
SHA1
ed391419c4815c28a84e97b38acc978ea0831b32
-
SHA256
79eb3ca7911f4bb55139944e3a175791f60f71d48b7c9aeda3d2d9459407204e
-
SHA512
87c684a0f3192fcafc0750477df568125ac0b4e91cbca57343db94c4d6d2b6f821130d177582b9a83474d31bfd3fac22ae75b48b19363b02ca46ca68a6270bb4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8xvnh:6uaTmkZJ+naie5OTamgEoKxLWIlh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
79eb3ca7911f4bb55139944e3a175791f60f71d48b7c9aeda3d2d9459407204e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections