General
-
Target
d6044ec7e1291b2bc39b7d00a34b27ba02114b9c4f4517ed9c3362c20ad5864c.exe
-
Size
707KB
-
MD5
d6b3707c17ceebb4eff8cc4e7fb6484b
-
SHA1
ea13a1e9d5fa80d5a273a4fb6449ebf9c3cccec9
-
SHA256
d6044ec7e1291b2bc39b7d00a34b27ba02114b9c4f4517ed9c3362c20ad5864c
-
SHA512
0304e92caa6a93c3c974c96151934f67c2304c5eef0f38e65824036d55164f8b84e5ff17c602632986c3dde8b41dd3231922a39e8f480f941d3ce22a6706bd47
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8lvnh:6uaTmkZJ+naie5OTamgEoKxLWoBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d6044ec7e1291b2bc39b7d00a34b27ba02114b9c4f4517ed9c3362c20ad5864c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections