General
-
Target
c4d00fc34efde0d4ce84502803c95296981a84e09e5603945ab532a07b8dc5cb.exe
-
Size
707KB
-
MD5
aae1a7d6c0ebe3f27fc0bf430485a31a
-
SHA1
8efba860199285a6e86cd818f8c8faf84325e9f6
-
SHA256
c4d00fc34efde0d4ce84502803c95296981a84e09e5603945ab532a07b8dc5cb
-
SHA512
c57fab04089d8eee6fd8c518c380d23e4be4928f91fa1e4e3696bc2dc5792e5875326c277b7d9b4a5615130adaa92b03bd7c500a3c818ba48b6f88c7a996e6e5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWtHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c4d00fc34efde0d4ce84502803c95296981a84e09e5603945ab532a07b8dc5cb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections