General
-
Target
7b4a7ef5ec23e756af8f373ce066e0466d3d8fa4367b0f9a9b6e12d0b651f486.exe
-
Size
707KB
-
MD5
71cae21dd247b3089bded35595ff79d8
-
SHA1
7c23e7be6ece8c08f47d48e65e07b6096e4210df
-
SHA256
7b4a7ef5ec23e756af8f373ce066e0466d3d8fa4367b0f9a9b6e12d0b651f486
-
SHA512
c4edbac7b9e035fb9f5e7653c8c841b9ea4b4b4ec4cb86b3f5560e7049bc042c248e7bf68c238999748f23939bb11d2505fa660ff6aded326e80fc81e05dcc4d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q85vnh:6uaTmkZJ+naie5OTamgEoKxLWD9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7b4a7ef5ec23e756af8f373ce066e0466d3d8fa4367b0f9a9b6e12d0b651f486.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections