General
-
Target
a7d7ebc614393e283bddaefff2a3d7fdeeac58cf7035fdac8bd591325a83bde0.exe
-
Size
707KB
-
MD5
004b3d0554f62b269554499812682d2c
-
SHA1
aa621394454081649e1536393e707ea25041f394
-
SHA256
a7d7ebc614393e283bddaefff2a3d7fdeeac58cf7035fdac8bd591325a83bde0
-
SHA512
5d5d54fd47e910a913dbe2dc3b988883352ef2a6bb7c08c5f30846894a8b0a0f404e5f1d483f5a6c308a966f1591d391d1f9d266e466cff1c5371236da44f249
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Wvnh:6uaTmkZJ+naie5OTamgEoKxLWKoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a7d7ebc614393e283bddaefff2a3d7fdeeac58cf7035fdac8bd591325a83bde0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections