General
-
Target
7d48137481981beed9f0191b2ba3077bdf58efef63fe2a38c320fec5351c365d.exe
-
Size
707KB
-
MD5
0d8ad26fe03027250f916b299de65b16
-
SHA1
968534b6584c0199f7d8a537f2f78ef8a11757e5
-
SHA256
7d48137481981beed9f0191b2ba3077bdf58efef63fe2a38c320fec5351c365d
-
SHA512
27aef833f78e5d0226ee76ee605f7530706a197ca1217f8207d447130c37f3f737b1bb54c57c9ce39d41462cc27cd849c2747eb0cbc6fd01e25aa27850e20d6f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8jvnh:6uaTmkZJ+naie5OTamgEoKxLWVDh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7d48137481981beed9f0191b2ba3077bdf58efef63fe2a38c320fec5351c365d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections