General
-
Target
c94b44bbf9600f8a146d947a23232059fbe3c428551824970d2cf203359a8765.exe
-
Size
707KB
-
MD5
f9f8241c2c544139db1967763b187c3e
-
SHA1
e5ea6be149a0c02e49f09c1acfb5ee0b2789286a
-
SHA256
c94b44bbf9600f8a146d947a23232059fbe3c428551824970d2cf203359a8765
-
SHA512
8bbd53581c29b00a7e93ee8eb2919fe787d5563ca67d2d438e0d282ff560cab130bf51001a79c1da4cb50667e738b4dc68ee22d4c5a85bfd232109ef86abaa6d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C85vnh:6uaTmkZJ+naie5OTamgEoKxLW59h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c94b44bbf9600f8a146d947a23232059fbe3c428551824970d2cf203359a8765.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections