General
-
Target
dcaf8637a62f69699a6b031871fc703509fc382c0d280ad6dd29206cb7cd8562.exe
-
Size
707KB
-
MD5
b845b6099f78e62c781da2cd25e0fdfe
-
SHA1
4f2a2da272dff08759e13763e9d552fa6a4db300
-
SHA256
dcaf8637a62f69699a6b031871fc703509fc382c0d280ad6dd29206cb7cd8562
-
SHA512
542759686b77240b2a585760d8379c686a9ade6b6883e5b0d053c10f3bfb7f35ac55c3405b575fcf9d9fd2649a5d4e6dda048c9750cbad98cd89bf72900a8fbd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m81vnh:6uaTmkZJ+naie5OTamgEoKxLWNxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dcaf8637a62f69699a6b031871fc703509fc382c0d280ad6dd29206cb7cd8562.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections