General
-
Target
c4f46ce37eee2b4ef77c88ce74c15628039c39ea80a952c39f84150ae649723b.exe
-
Size
707KB
-
MD5
3f71fd9bad8e5c1b7e42c91b226f51ab
-
SHA1
20f5a09f99411047813ebfb5e0d6e17141613a77
-
SHA256
c4f46ce37eee2b4ef77c88ce74c15628039c39ea80a952c39f84150ae649723b
-
SHA512
0d3d4b745aeda49736dec22d553bba1f64586abe8640256696c9716430690e8d31041c8310f154d5c36cb9dadcf53de22f1b1f30bea138d5f1bca784a38c4ff4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8ivnh:6uaTmkZJ+naie5OTamgEoKxLWxsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c4f46ce37eee2b4ef77c88ce74c15628039c39ea80a952c39f84150ae649723b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections