General
-
Target
dc04d488920adca1320f58a9e85ea3e72a6c8c2a21f5e6982c4e148d1cd029db.exe
-
Size
707KB
-
MD5
14306fbc9ee163d76d219168a94f50b3
-
SHA1
a4f0040638b87aff6eedc5c764e6e7c86047b758
-
SHA256
dc04d488920adca1320f58a9e85ea3e72a6c8c2a21f5e6982c4e148d1cd029db
-
SHA512
205ebb10257c932382c5c5f76f68ba8b81b974cca04d90aa495eee4fe7373293e60541c6e33edba09e062c2440246a1e8d9b92b5036a5c0227df0e6bfdaa639b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWgQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dc04d488920adca1320f58a9e85ea3e72a6c8c2a21f5e6982c4e148d1cd029db.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections