General
-
Target
daf4e3e9c51e392b6f10b2e25680de5b74a66c9cb0112bc019c0a97caa5e0896.exe
-
Size
707KB
-
MD5
3cf4db30aea34626b853fd5f2fc5f597
-
SHA1
a7f57ac8531695638eb1e19004c9bffad9ae4fbe
-
SHA256
daf4e3e9c51e392b6f10b2e25680de5b74a66c9cb0112bc019c0a97caa5e0896
-
SHA512
dff848590751b8282ad3da23de5396e2eb432af269a8ea2a9955aab0702ebbd12a11d3de9d727eb148b275aa502452e6a22571e6b6a298f96a935b5af823c118
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1j88vnh:6uaTmkZJ+naie5OTamgEoKxLWiih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
daf4e3e9c51e392b6f10b2e25680de5b74a66c9cb0112bc019c0a97caa5e0896.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections