General
-
Target
f674108b870c5c61bd4d0f2428fe1c3f317d0e39afa8dffbaade1e9a410cba0d.exe
-
Size
707KB
-
MD5
c444727613aa81c5ca20118573c14a6e
-
SHA1
c7d35ddb6dbf8180cd04fa3d0cd90831417d9a24
-
SHA256
f674108b870c5c61bd4d0f2428fe1c3f317d0e39afa8dffbaade1e9a410cba0d
-
SHA512
95deb1ed1c768a43a99258970c1d36f0552c58b8884567d01db1f770f65ffb683c10f0e783350334a620721b7503776de20c9392dae1ae9f7e7206eb6a29b405
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Hvnh:6uaTmkZJ+naie5OTamgEoKxLW9Ph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f674108b870c5c61bd4d0f2428fe1c3f317d0e39afa8dffbaade1e9a410cba0d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections