General
-
Target
b7ff88bc556cd2204c5da225c7c5ea81c9f8d4797ab3818ecfd339e10a02a786.exe
-
Size
707KB
-
MD5
025ce94c1dc594a1caecbae71a32238f
-
SHA1
7b4c787de37232cd022bd64bb025df069b546cc0
-
SHA256
b7ff88bc556cd2204c5da225c7c5ea81c9f8d4797ab3818ecfd339e10a02a786
-
SHA512
93a37d6407eb92b2f0bef14731b0d80ed7cdb8c5fccd20b2a7007d3b98f64728b3f635302061dfb5778ee5d5f6d341f014562885cc1ec38b1049139fd213c4cd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWWdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b7ff88bc556cd2204c5da225c7c5ea81c9f8d4797ab3818ecfd339e10a02a786.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections