General
-
Target
7afd6fbc4de610ba9164dfc52053de235ba5dc452b6015ff641fc84e642a6c1a.exe
-
Size
707KB
-
MD5
5b2fe46d8c6d160e3c93ca4437ca300e
-
SHA1
17c56b36da16fb8abc228cbe3e1a4c5cf3c8d3b9
-
SHA256
7afd6fbc4de610ba9164dfc52053de235ba5dc452b6015ff641fc84e642a6c1a
-
SHA512
12b5a025e35b11f183cbfbb3c3a2bd2b215128a6d901898fe269fa50f01a631814526c5e491e1888182282050ddc7482bcd466b4d928e532150832863ad5be98
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWjdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7afd6fbc4de610ba9164dfc52053de235ba5dc452b6015ff641fc84e642a6c1a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections