General
-
Target
c6f56569d06cb20ca7e85332d2c7962e7e47006ebf6b80b4139c43a988925ab6.exe
-
Size
707KB
-
MD5
40cb6808bb4cc30c24bf57b1f7b5d5ca
-
SHA1
ff7a42ec001ac0b58d86b9fd8c0f3f552b8a9186
-
SHA256
c6f56569d06cb20ca7e85332d2c7962e7e47006ebf6b80b4139c43a988925ab6
-
SHA512
74b671e16ac1213a04efa267221bdcb1174b25aed2c37b55ce4929bd6c99c5f256ad79a1ee20fe49619b20dc14eeb40c91406c6e70f643ab3e35209871e64fd0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Fvnh:6uaTmkZJ+naie5OTamgEoKxLW9hh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c6f56569d06cb20ca7e85332d2c7962e7e47006ebf6b80b4139c43a988925ab6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections