General
-
Target
7a20065c8e9e19f403e842c546dbb013d9fc06450acd6d1b5b61cc1bf882ed50.exe
-
Size
707KB
-
MD5
a0e461ab4f6c0d27036d9f9fc4ce2523
-
SHA1
43f23be654bb586a9c6b0011f764e48bd5c5a714
-
SHA256
7a20065c8e9e19f403e842c546dbb013d9fc06450acd6d1b5b61cc1bf882ed50
-
SHA512
53d42ad55160c29729720600c00362ee6dc61d49ab33c9faa69311013860db59a7d024b1a805ef521402b5866ea54541e45ee1becd123e664ab6456534abedbc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v80vnh:6uaTmkZJ+naie5OTamgEoKxLWuKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7a20065c8e9e19f403e842c546dbb013d9fc06450acd6d1b5b61cc1bf882ed50.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections