General
-
Target
cf73e39c0778de20e7a76bb08748dc09f176afe6b8859b3187a7f5b33d63a168.exe
-
Size
707KB
-
MD5
1382f6a8fa8a0239e67d22958b109757
-
SHA1
1c1d1e4035daddcfa393da96219c9c74ec5c15cf
-
SHA256
cf73e39c0778de20e7a76bb08748dc09f176afe6b8859b3187a7f5b33d63a168
-
SHA512
4a1a9da3347dfc7f3e7af5a05642267cc8fb42993392e2c861ca24d9f3e2a147abbcfb52e3d1a9ae230f95e975f0093cd4de699392acaa87ba64370fa02dc6b5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8+vnh:6uaTmkZJ+naie5OTamgEoKxLWagh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cf73e39c0778de20e7a76bb08748dc09f176afe6b8859b3187a7f5b33d63a168.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections