General
-
Target
de7be944e3e93a355b3e4a612f8fc86dcbc3de3edbb0c10b26c2a101c782b5d7.exe
-
Size
707KB
-
MD5
d46e028fc4a4d0f883d8cb187b7cf351
-
SHA1
6a8aab5c92aee28d86092aff935a1a0a2ac6119e
-
SHA256
de7be944e3e93a355b3e4a612f8fc86dcbc3de3edbb0c10b26c2a101c782b5d7
-
SHA512
c7a61bfa6094612d0490663dea75da89c19fd7244e0c736c0506137bddebeec444a31ad77089d818a0dfc47c5c48558593cc5842c35c9ca159d03321fb356238
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q87vnh:6uaTmkZJ+naie5OTamgEoKxLWzrh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
de7be944e3e93a355b3e4a612f8fc86dcbc3de3edbb0c10b26c2a101c782b5d7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections