General
-
Target
964fb5ec9820202aca64bbc970df39c6af5f9d0ec0d8b28b35a998003b60895a.exe
-
Size
707KB
-
MD5
70ffce1481a79faae637e8cd27eba5e2
-
SHA1
878f83542536edda88abb4d2f036793a969ae233
-
SHA256
964fb5ec9820202aca64bbc970df39c6af5f9d0ec0d8b28b35a998003b60895a
-
SHA512
6ba7d46b704c34df04b221e4a0c9b4372d20b9ff5fe8930dfec6004d6779a523e57b16b074cc3e0e52b62b8442dc11c1b433b20b4339fe70684e55feffb968bd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8Xvnh:6uaTmkZJ+naie5OTamgEoKxLWR/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
964fb5ec9820202aca64bbc970df39c6af5f9d0ec0d8b28b35a998003b60895a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections