General
-
Target
7d77c36d51a718b1367ec59c3685dcf7540bbe20bceb8fe121b259a887b4cf76.exe
-
Size
707KB
-
MD5
781e6b1ec9d6cfc4ca5f564559dd96d9
-
SHA1
c28d8ff1c59226e813c5585f23d51cb87a9004f8
-
SHA256
7d77c36d51a718b1367ec59c3685dcf7540bbe20bceb8fe121b259a887b4cf76
-
SHA512
6602ace0af2f46d8b2bdf4e3b5c3cc9cab2d06b6d0679b70d70288653051c834a52d1fcd8c39d2c018acb9b8c3cf33b81e5949183233db7025187acb7dd64604
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWIRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7d77c36d51a718b1367ec59c3685dcf7540bbe20bceb8fe121b259a887b4cf76.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections