General
-
Target
cd7bf67c3283614e1bb507820ee1217c5950e474e335789e4430894871c751f6.exe
-
Size
707KB
-
MD5
b29d49b179aa4bc9e10b13476f0a426a
-
SHA1
a517a5c56283b2a47966c323be8a84c7bd33db51
-
SHA256
cd7bf67c3283614e1bb507820ee1217c5950e474e335789e4430894871c751f6
-
SHA512
36b3d211503305a35d6c769fc204dcf86d911f61819d9086d2a5e2adfcc82262c553313c910007c4bf5209e9fe1ff6165fa44fe3826cd3c25ab8243817b9bf1e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Xvnh:6uaTmkZJ+naie5OTamgEoKxLW0/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cd7bf67c3283614e1bb507820ee1217c5950e474e335789e4430894871c751f6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections