General
-
Target
907a05bf750f010b661c5ca1f8d251b6617ad4f06c103c9bc1a41baca87f34ac.exe
-
Size
707KB
-
MD5
a35a2d68349fd4b4a5e9c9a393867aed
-
SHA1
a50a99b42d5b9c215f1c731498ebd92caf72b573
-
SHA256
907a05bf750f010b661c5ca1f8d251b6617ad4f06c103c9bc1a41baca87f34ac
-
SHA512
19cf083b8ffb0e4b9a96491024bf66872100dcff105aae460db161f20165c134fd459ca267a8483f4ab3d6d1d256ff863e0409fac08f98e19f6038f014dc32df
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1w8evnh:6uaTmkZJ+naie5OTamgEoKxLWbAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
907a05bf750f010b661c5ca1f8d251b6617ad4f06c103c9bc1a41baca87f34ac.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections