General
-
Target
7feb698c5810d7941d1b18f86f2a1ded431d162a36881ea4cdf57b84c5465739.exe
-
Size
707KB
-
MD5
bb9b0f83b8d71141f1111b71c9048dd5
-
SHA1
45e389a68dd5f769c422dcfc782fd7c70a34a6d4
-
SHA256
7feb698c5810d7941d1b18f86f2a1ded431d162a36881ea4cdf57b84c5465739
-
SHA512
15cd6d45f3253b5879b08de6a48188874b0a6a1ff05e569177a6b51b31e111dcefa137ed74ad3e79f9af33c34da736f18aa8da0fccd393be0ff6b272f96c5e82
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1a8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWZEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7feb698c5810d7941d1b18f86f2a1ded431d162a36881ea4cdf57b84c5465739.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections