General
-
Target
b407d364d61b97e129f8a7128d7528b6ffd25c1ed95bcb5d99a4364aa4c00a68.exe
-
Size
707KB
-
MD5
689e77ac2c3fe7ed4e898960242d5f83
-
SHA1
2d22de03aa0c1896d1b667a7898c54510b659d8b
-
SHA256
b407d364d61b97e129f8a7128d7528b6ffd25c1ed95bcb5d99a4364aa4c00a68
-
SHA512
62a6faf0d79a720e88aae8a94798ee1c9819392fb7a98701f9ea31fc942516348b6ff54be9040fbfd243f832e05dbd44a5d344a51d527d7153d8b13651165fdd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1j8Ivnh:6uaTmkZJ+naie5OTamgEoKxLWC2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b407d364d61b97e129f8a7128d7528b6ffd25c1ed95bcb5d99a4364aa4c00a68.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections