General
-
Target
d4dfaa12817fd387cbd78b738b9843831bb487d9a4c9a2e65f41272276c18343.exe
-
Size
707KB
-
MD5
a6e6c297f02fb172c3f6b9aec90398eb
-
SHA1
209126b4fd3c179b7a43a36b3f48a28b7b9aa954
-
SHA256
d4dfaa12817fd387cbd78b738b9843831bb487d9a4c9a2e65f41272276c18343
-
SHA512
c64baba6073afcf3e7613ace05d0a433479070940a63e14dd57f4723510facc0fca6a4713b6bdc6f9f25668726f236683547401721fb8a3205fabccf3d1ef27b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B80vnh:6uaTmkZJ+naie5OTamgEoKxLWMKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d4dfaa12817fd387cbd78b738b9843831bb487d9a4c9a2e65f41272276c18343.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections