General
-
Target
7fcefbdc93830c6a6dd51c53139ec6d4b28bafd44d491ffc9330ea6c951a90b2.exe
-
Size
707KB
-
MD5
9d1ea0c5f0807ad78d4f3311120d7bfc
-
SHA1
b8964b50c4e45c71e686fe91e74ea7c39c715a87
-
SHA256
7fcefbdc93830c6a6dd51c53139ec6d4b28bafd44d491ffc9330ea6c951a90b2
-
SHA512
c8b153fb535bfc9a44c66f1ca7dc36a9607389f3e1de3c0e301b3459892460993549475074335ca03e80b94d26c75cc5c620d9fdcc9818d09fafa580fc1ba103
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Jvnh:6uaTmkZJ+naie5OTamgEoKxLWmth
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7fcefbdc93830c6a6dd51c53139ec6d4b28bafd44d491ffc9330ea6c951a90b2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections