General
-
Target
7f154d628af3b916f1f7e4e00d07b360b3c72f1889e7fa58e57eead9d3d2de07.exe
-
Size
707KB
-
MD5
9bdf397d12fac88b647721bbef61d024
-
SHA1
b8d371948665d07e635940db4c47e6e23e4f88e4
-
SHA256
7f154d628af3b916f1f7e4e00d07b360b3c72f1889e7fa58e57eead9d3d2de07
-
SHA512
726420a9be468e90471e1322d4b00a55de44a029210a73aaf8963b0c66ec1b02cc6d129705df8cc41cd76be46d6ded2cc62b623a66d41f1acaf29d4e3ddfb26d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8Dvnh:6uaTmkZJ+naie5OTamgEoKxLWIjh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7f154d628af3b916f1f7e4e00d07b360b3c72f1889e7fa58e57eead9d3d2de07.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections