General
-
Target
7c8c2ef8a43acc7a2e6caab8c64a71f718ef98d6941da2e9ca755f26d00148df.exe
-
Size
707KB
-
MD5
578a12d8c6ac49ee172445296afe6924
-
SHA1
27cf458ca9bf75df857398f3cd876dfa799c73d1
-
SHA256
7c8c2ef8a43acc7a2e6caab8c64a71f718ef98d6941da2e9ca755f26d00148df
-
SHA512
71aff94a55398368a046ccecfda161957070655719b65f9b060a517c5b2fbf82886eef128bc1cf40cd03b22084536afb49899f9538598f605663493b16cc9f0c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128Evnh:6uaTmkZJ+naie5OTamgEoKxLWt6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7c8c2ef8a43acc7a2e6caab8c64a71f718ef98d6941da2e9ca755f26d00148df.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections