General
-
Target
a762c4f6b315ebc64d04f166b7e44c767dfcf1b858e27f135c8d19806b2e3ceb.exe
-
Size
707KB
-
MD5
8f5057116f832798f3601a0af79b5a7b
-
SHA1
b38115f207f304d2a079252b7c6e4096d4374b48
-
SHA256
a762c4f6b315ebc64d04f166b7e44c767dfcf1b858e27f135c8d19806b2e3ceb
-
SHA512
3593ff61dd265d7ee627fed1e693c2fe434f2a990063fb60a0425fb9a719080bdfbdd8ff08480189963a5f7087bdf394002c847783996e4319ff156aceab6c40
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8tvnh:6uaTmkZJ+naie5OTamgEoKxLWMZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a762c4f6b315ebc64d04f166b7e44c767dfcf1b858e27f135c8d19806b2e3ceb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections