General
-
Target
b72edcc5307f634beca73337193ae88b93b664c38bde3cd7ac939157fcc23bd6.exe
-
Size
707KB
-
MD5
133b0c1fa6a221fba1fbc73af8f98918
-
SHA1
549ddf6a9d1bef936ffc07ab96359c3db7e593ef
-
SHA256
b72edcc5307f634beca73337193ae88b93b664c38bde3cd7ac939157fcc23bd6
-
SHA512
2f3e41b2ab8758d3607c2b14d369462fe4c65b98197d783b5940f018135aec141de40d5bbe7b964968801c27565965a4617fadb233c5da64eadd7a1f30e505f4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A82vnh:6uaTmkZJ+naie5OTamgEoKxLWLIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b72edcc5307f634beca73337193ae88b93b664c38bde3cd7ac939157fcc23bd6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections