General
-
Target
94f5771c6dd0d474e0bbabdb2bcff695c71661cb2e58247093e6f425eaba15c8.exe
-
Size
707KB
-
MD5
454249a0546020f150086ee39473d1c3
-
SHA1
612461b87ca7a2635597de3de791fa214814811d
-
SHA256
94f5771c6dd0d474e0bbabdb2bcff695c71661cb2e58247093e6f425eaba15c8
-
SHA512
f2f58bae527ea928ba948db5c04d06ca9852a1c6dd6a3250200080874f35b7c4864024e6fdc3ef3d81b186590e2d2214ac3733f4ab24df438074ebd0435cd21c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/8cvnh:6uaTmkZJ+naie5OTamgEoKxLWWCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
94f5771c6dd0d474e0bbabdb2bcff695c71661cb2e58247093e6f425eaba15c8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections