General
-
Target
ac486171e1f404efdb660f1043298e1f44389e1e67c5a2be20a5ab0cc463f980.exe
-
Size
707KB
-
MD5
76f26f5f479cf9a42e6325c7032d0cb9
-
SHA1
a78cf8968f3c31a2456add9245da8bb68b74cf53
-
SHA256
ac486171e1f404efdb660f1043298e1f44389e1e67c5a2be20a5ab0cc463f980
-
SHA512
4695dc7d7a0223114c6deb9e728c19e367e1a40a40d0e4bd0cab8247ded47361d4ff675d17fbb3eceefe42d559b6418c92eaeba5217baa84d44d5e7d063b1cbe
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8dvnh:6uaTmkZJ+naie5OTamgEoKxLWfph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ac486171e1f404efdb660f1043298e1f44389e1e67c5a2be20a5ab0cc463f980.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections