General
-
Target
7cf46303850a4346e7a3a9dfd230368984ee5b6a0db90d573cd7e1a33caa0891.exe
-
Size
707KB
-
MD5
8fe1ea1151be952bcce9bbb87fc5c69d
-
SHA1
6e5e4d7d94e3b35996298cd39c3021d073e38f3e
-
SHA256
7cf46303850a4346e7a3a9dfd230368984ee5b6a0db90d573cd7e1a33caa0891
-
SHA512
067331629608f58cf9cc9ef770bcea1eac4ccdc4507de064eafff8a035b48b6ac090fa7e777f8e911d8a0c3c76b0a54c1020f0134af756b6364e3ac2ffb5156f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q89vnh:6uaTmkZJ+naie5OTamgEoKxLW5Jh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7cf46303850a4346e7a3a9dfd230368984ee5b6a0db90d573cd7e1a33caa0891.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections