General
-
Target
a68c682a0535cdaf40ec2a229b25afc19980a4292d999e3204326cbc4096259d.exe
-
Size
707KB
-
MD5
e84931f77ff8f746a1dc3ac8cdcd8966
-
SHA1
04e83f02c0a85358c1df38a238fdce5aeb8ac543
-
SHA256
a68c682a0535cdaf40ec2a229b25afc19980a4292d999e3204326cbc4096259d
-
SHA512
5c81ab67f6d2a2fdc11b725fe5f65c4bf81cd050ef642d17bc3c3e3a51c54034ec85a989d3b9ebc27f8ef8c3fbeecf64fbe8e3e7c74e372031e6c5f781259c26
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8Xvnh:6uaTmkZJ+naie5OTamgEoKxLWb/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a68c682a0535cdaf40ec2a229b25afc19980a4292d999e3204326cbc4096259d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections