General
-
Target
f194c6f542faf03228ba01070de3dc6a8f4da609141b7de5464fc93808f05bd2.exe
-
Size
707KB
-
MD5
8699f0c6a46f17758c7500f10b2c2fb5
-
SHA1
47f25f40b6909b42aa8bf087c32fd9cf71f0609c
-
SHA256
f194c6f542faf03228ba01070de3dc6a8f4da609141b7de5464fc93808f05bd2
-
SHA512
852255c721f453204f6afc0b3bfc1f1981d84c68c6bd641724121e62a009199ba62d3d31a4b4b3c8c7385090115dee45d35c97ac189f313d9038b6705add32a8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8Yvnh:6uaTmkZJ+naie5OTamgEoKxLWamh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f194c6f542faf03228ba01070de3dc6a8f4da609141b7de5464fc93808f05bd2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections