General
-
Target
c605fe98583fab6c3c7e712659115889d00ca6cebc8ab6e0f8023cd195930843.exe
-
Size
707KB
-
MD5
e4a1fbb51f1393e3397572610c0df42c
-
SHA1
d76a4a2b7c119bde9546bf838aaff3b7432c79c3
-
SHA256
c605fe98583fab6c3c7e712659115889d00ca6cebc8ab6e0f8023cd195930843
-
SHA512
a9232663220f39133a68750ee04badf9d0f916a5b5a1bb5e0966d715ca280e0b5df0b9ed2334f03762575140d038928ad4c7d537042d11f956eec7709b05487d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Yvnh:6uaTmkZJ+naie5OTamgEoKxLWkmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c605fe98583fab6c3c7e712659115889d00ca6cebc8ab6e0f8023cd195930843.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections