General
-
Target
ef65dc138b6fb58965d9d08d53faa7430df17e61ffb98247fede140dd27b5081.exe
-
Size
707KB
-
MD5
6b08893934f9a97fdaa0ce175b100b13
-
SHA1
c791ce89817f9b1e6581ee0b5a7c8feac509ad23
-
SHA256
ef65dc138b6fb58965d9d08d53faa7430df17e61ffb98247fede140dd27b5081
-
SHA512
3d8d03fe60543a8291149d235a3d7ddedc7287123fbb591c3fe8a243271a559565183494a51da4942ae4862ffb958f15346b9b82a910b4ee4481422c1a32001f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8Mvnh:6uaTmkZJ+naie5OTamgEoKxLWDSh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ef65dc138b6fb58965d9d08d53faa7430df17e61ffb98247fede140dd27b5081.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections