General
-
Target
a4ff3288185acd5885dd1d7a2ab513369b3eea6a2d56fecac617268946068235.exe
-
Size
707KB
-
MD5
4569edd43d436263dba01da7bca1e918
-
SHA1
749fac228502761abb738a78da147212135ad603
-
SHA256
a4ff3288185acd5885dd1d7a2ab513369b3eea6a2d56fecac617268946068235
-
SHA512
70869bdee9d87c130999b45bb28613deac5b1e5a3be1b54b0fdb28358fcda7d03830c59de5ffe9592aad6f27bb63187956e977e4f0def0760e5a0ee94b31e41d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8bvnh:6uaTmkZJ+naie5OTamgEoKxLW9Lh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a4ff3288185acd5885dd1d7a2ab513369b3eea6a2d56fecac617268946068235.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections