General
-
Target
7c7c17fc3c277a307cffe27e500c32729e82aa19f7b147e6f7def4a188e8f2b1.exe
-
Size
707KB
-
MD5
dd271ad31b865a5b16e7485bb2942d63
-
SHA1
dd33ff81752abc79acd386e628d2160b190d1bfc
-
SHA256
7c7c17fc3c277a307cffe27e500c32729e82aa19f7b147e6f7def4a188e8f2b1
-
SHA512
7019b54b030c9ec8c88c5b75b59771669dcf6d66703431ef8d137d4caa207383a0f6d77b726edb8a2d9f668aa1dc48730c88abb40ce7f963c17ba8d1dc473c81
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8vvnh:6uaTmkZJ+naie5OTamgEoKxLWdnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7c7c17fc3c277a307cffe27e500c32729e82aa19f7b147e6f7def4a188e8f2b1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections