General
-
Target
ac689a3cf0e69fd5376b49b19c337d3333931b187455458f81dcb49be63a42ee.exe
-
Size
707KB
-
MD5
8c0b6e4647e4efbbd4e6fdce74ad2392
-
SHA1
022e01980b0eb0de51cca2ec1b61561deb0247a1
-
SHA256
ac689a3cf0e69fd5376b49b19c337d3333931b187455458f81dcb49be63a42ee
-
SHA512
89ad0d92867d32b85256498c7c6d0278a65d19b909a750a8aed29ea019bb1bff2e11b54b4fc6817290a5a0c1df41c4e83e5fc693e6c5c44dceb2c3261a871752
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148ovnh:6uaTmkZJ+naie5OTamgEoKxLWTWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ac689a3cf0e69fd5376b49b19c337d3333931b187455458f81dcb49be63a42ee.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections