General
-
Target
c391fbd4df28eaca595a97a32377a27463a8d30282d788f5e024a6c31c755422.exe
-
Size
707KB
-
MD5
d8950a875c9f7c0f9dcd330fa5a88b1f
-
SHA1
4540ccc960b4474bbe4382b44168c2b79c556a6e
-
SHA256
c391fbd4df28eaca595a97a32377a27463a8d30282d788f5e024a6c31c755422
-
SHA512
2acaf19ac28f570251db3a179cb797a1a5e1644fdea63f1f1d69f1e4cade46507912aaf67a3a56af1975fc196a145abb7cc4c3a8e353bb178d1808654e284356
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8yvnh:6uaTmkZJ+naie5OTamgEoKxLWkch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c391fbd4df28eaca595a97a32377a27463a8d30282d788f5e024a6c31c755422.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections