General
-
Target
c107f1f3b968f44fcddc2baf92a304a42561567d0a851a48e998def58dc698ae.exe
-
Size
707KB
-
MD5
f878c99ca1724f8bbbab407844712e71
-
SHA1
6edb7c21e76f23128a9a92ea9e79258ef8115ee5
-
SHA256
c107f1f3b968f44fcddc2baf92a304a42561567d0a851a48e998def58dc698ae
-
SHA512
9710830e049a81bcea9d32ac97a4b132d28b78b90cd0d9519742ee722d3deb66a0c9bd08d8b943aa2374f8fcc4382a3bc06b3d08b514c0f9a6c4b35c4627dbe2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8svnh:6uaTmkZJ+naie5OTamgEoKxLW8yh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c107f1f3b968f44fcddc2baf92a304a42561567d0a851a48e998def58dc698ae.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections