General
-
Target
878ccbff17f1c56fbee9ebb730ed0fbc286320d86c29094d802bbc2a4f525587.exe
-
Size
707KB
-
MD5
5ea18ead4ec1dc7f8a9920d1688e16f9
-
SHA1
68a1f57b5f5072fcfdb337e2f20d20b695c580d3
-
SHA256
878ccbff17f1c56fbee9ebb730ed0fbc286320d86c29094d802bbc2a4f525587
-
SHA512
43a282b68278845bf16ce627bf8903e03a53074fe72b97503778242dc011d2dcf10d68cd7be048a90a1a2251c62fb80afed76dca4f2ce5722119a06efa9c1c3c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8Gvnh:6uaTmkZJ+naie5OTamgEoKxLWw4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
878ccbff17f1c56fbee9ebb730ed0fbc286320d86c29094d802bbc2a4f525587.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections