General
-
Target
7c39e8bd6618e5a75f7b31f7fbd6f31a59874228f9b49039af6102a62b17d733.exe
-
Size
707KB
-
MD5
77e28e732ab24ac3b80d6e7c3086077c
-
SHA1
efcc61e4ff9fbedd45e0eb5d6093f6ea7599b2e0
-
SHA256
7c39e8bd6618e5a75f7b31f7fbd6f31a59874228f9b49039af6102a62b17d733
-
SHA512
ccb4ca92e66229f4d7355ce6fa788c0472ea33c7a836dcf863cac00735ddf4fa6f2bd4b0ec50f8e69cbb4416d94b6ef45ec4ed9f286facc956b63abfe07f6305
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1986vnh:6uaTmkZJ+naie5OTamgEoKxLWgUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7c39e8bd6618e5a75f7b31f7fbd6f31a59874228f9b49039af6102a62b17d733.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections