General
-
Target
7b32194a863dc4476377ea1c515cef10e7843e62990555a8dec06cc4badfe904.exe
-
Size
707KB
-
MD5
94f9835490750e913dda6bce9bf483f0
-
SHA1
e64cc4cc7a8416b9be74d97b142c9ca0c3b822de
-
SHA256
7b32194a863dc4476377ea1c515cef10e7843e62990555a8dec06cc4badfe904
-
SHA512
ad7d257467e443b390a3c6dcaebac436a752f15035918b18370171dd95bd6e2e8fcbc39d6cac439761919f0313ee534921b135392d1cba830aacf803e2f3adce
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Vvnh:6uaTmkZJ+naie5OTamgEoKxLW2Rh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7b32194a863dc4476377ea1c515cef10e7843e62990555a8dec06cc4badfe904.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections