General
-
Target
7ec46564fd73d239e22f652b38049f2c10ca60916ffc71a544e4093586dd6363.exe
-
Size
707KB
-
MD5
536467d65fbfbaa3412cdeacb6a5f133
-
SHA1
0d0990c4eb0f2021f648ba369be458f7a7b210dc
-
SHA256
7ec46564fd73d239e22f652b38049f2c10ca60916ffc71a544e4093586dd6363
-
SHA512
8f7db880bdbceec6cfe3a47f600fed2f9ff8a6b45a657f7db25268f919639b58ccad45f22183479b10d1c80ce8f65e5f83d7cae8170c3a26f9ff78565ebdeb44
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8fvnh:6uaTmkZJ+naie5OTamgEoKxLWp3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7ec46564fd73d239e22f652b38049f2c10ca60916ffc71a544e4093586dd6363.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections