General
-
Target
7e1b87bb5fc909931e3305a258d9af0ae591a78132a90fd5cc6bab62361eec21.exe
-
Size
707KB
-
MD5
c55126b9a806bdee3118c8f5a80f6c94
-
SHA1
6ffeca7a8684cda6f637eddcbe651fa591f1e2aa
-
SHA256
7e1b87bb5fc909931e3305a258d9af0ae591a78132a90fd5cc6bab62361eec21
-
SHA512
fab21a1a773375036aea1bc0194336a1256238c213371265dd95758afdcb039f140e92e6dfdf6a4d91ef2863047ca3abcb4c20134b670e905689a55c286fa423
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t8+vnh:6uaTmkZJ+naie5OTamgEoKxLWwgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7e1b87bb5fc909931e3305a258d9af0ae591a78132a90fd5cc6bab62361eec21.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections