General
-
Target
d7213f9c833cee141fc01f9497307e175a33cf6ec99ed357a7ebc616352187bc.exe
-
Size
707KB
-
MD5
43b6fd088a441109fddd5b935996ca46
-
SHA1
0a62e7911137d438843cd8dbb2cb7b904bf95538
-
SHA256
d7213f9c833cee141fc01f9497307e175a33cf6ec99ed357a7ebc616352187bc
-
SHA512
ac1547365b19b335f6909ea0c43439865f763cbf8b97957841b8482c63afa442d5b44cfb22282b06a4d711aafdbd67cfe1bf3804f3ba67dba2ce2cd7a48a397e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWjOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d7213f9c833cee141fc01f9497307e175a33cf6ec99ed357a7ebc616352187bc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections