General
-
Target
c722218b30746088655a3158bf633fd32af50663098ee527fce6ff55a535d9df.exe
-
Size
707KB
-
MD5
bd39536e15aec8245a3ae043edf3a2a8
-
SHA1
4c2424e5d414a51cd380476169740d1a6fd366b0
-
SHA256
c722218b30746088655a3158bf633fd32af50663098ee527fce6ff55a535d9df
-
SHA512
0fd6303110ea8a2d23abbed1b56e8e8c0a4091488f74c9cc019023dee02515143c04b2eb168765010e1c13db632d4f7141fd710c9e8053def263e9cf6f4af714
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWBdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c722218b30746088655a3158bf633fd32af50663098ee527fce6ff55a535d9df.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections