General
-
Target
cf0ae7fe4e27d105d005e18cbc54bf0fe931367694106c028f5092563e98c78f.exe
-
Size
707KB
-
MD5
3e809bd63595a2572b60481e20626b24
-
SHA1
68447c263d933ff16d7d0f29b24db8ef45951244
-
SHA256
cf0ae7fe4e27d105d005e18cbc54bf0fe931367694106c028f5092563e98c78f
-
SHA512
e42d725811b26bceea8fc146cde32b4c87fa23b22d18cbb05da601f5cc5279acccd960f9e5f62ed5958cc5d8895be93bbbf3acf12ffcaa5ef878c3e366ba1f80
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8tvnh:6uaTmkZJ+naie5OTamgEoKxLWvZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cf0ae7fe4e27d105d005e18cbc54bf0fe931367694106c028f5092563e98c78f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections