General
-
Target
efc43f2238c2b199fc04c84b26d8d2fc410544b46dbb18678731220da55c1ab8.exe
-
Size
707KB
-
MD5
1e6b1a931e55f4e821cf4102c72df6ff
-
SHA1
686093043a739232af42161005579191aa759def
-
SHA256
efc43f2238c2b199fc04c84b26d8d2fc410544b46dbb18678731220da55c1ab8
-
SHA512
759116961ece7c2d7f6acb7d0c9d476b0086e4eeda710bbdac79c2b6d2db9041d32477a5b009b0773d50889ffef5b8b986dcf89bb7e89fdc39afefa91f90b789
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8+vnh:6uaTmkZJ+naie5OTamgEoKxLWVgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
efc43f2238c2b199fc04c84b26d8d2fc410544b46dbb18678731220da55c1ab8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections