General
-
Target
a76c472b7db8e21881ff00e5b37641bfea7e260279afc5bfe0d1b5f3e2cb5fb6.exe
-
Size
707KB
-
MD5
9c76e4a86292941cd056284722b15555
-
SHA1
65a38e30ddd5f9f6eb7f4841bb529af79d457aa3
-
SHA256
a76c472b7db8e21881ff00e5b37641bfea7e260279afc5bfe0d1b5f3e2cb5fb6
-
SHA512
c93fb0ce5d44234286aa5a5cc8aca5115204e560fd72f28423b24aff7fe2f1f1928b411b0ec21b5a23a80542cb8651c2606040fdefdc26b28d4b40e64ba09bd0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Kvnh:6uaTmkZJ+naie5OTamgEoKxLWCEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a76c472b7db8e21881ff00e5b37641bfea7e260279afc5bfe0d1b5f3e2cb5fb6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections