General
-
Target
7b694798e969ab60753f2502adeb2d0a18e6eba0ef87841bf108b85ddeed4e5b.exe
-
Size
707KB
-
MD5
3eb5b4da1b89f11d1f7ff46d4022d8a0
-
SHA1
85df7109f619e61ac162809ff11dd4df8b7e58d7
-
SHA256
7b694798e969ab60753f2502adeb2d0a18e6eba0ef87841bf108b85ddeed4e5b
-
SHA512
e7b984c075b36edd52ef94c9cf02fef766e0c73185169b41a1ff43544d1803b7b011efb7dc1c6843fe8dccdf22edd9ab9010773dd604b6e4b359bd2c795a3764
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138ivnh:6uaTmkZJ+naie5OTamgEoKxLWesh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7b694798e969ab60753f2502adeb2d0a18e6eba0ef87841bf108b85ddeed4e5b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections