General
-
Target
f240176d4d2124c2a4c62a34c05af35e66918475fcc77ee8717e644a941110df.exe
-
Size
707KB
-
MD5
12e8d93482fde0792db17eddbb5d7812
-
SHA1
cfee598785a54d8a2c78efa755ff0526828f7b5c
-
SHA256
f240176d4d2124c2a4c62a34c05af35e66918475fcc77ee8717e644a941110df
-
SHA512
5c588610910b040c9e69d4154d2852344e78a648e585c4a7fc370bc0c75addc617a9ec0bca93a819a02ab8396acb82e232199ce883685e1c10cb3a6f57f1ea69
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8bvnh:6uaTmkZJ+naie5OTamgEoKxLWWLh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f240176d4d2124c2a4c62a34c05af35e66918475fcc77ee8717e644a941110df.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections