General
-
Target
f41fe2a553f47eff85da519b3bae53d98401c501a95b789df2e26e2a42cf776a.exe
-
Size
707KB
-
MD5
52361e57d53dc089617ff439a86e2241
-
SHA1
df279c3874cc67525a9985eef64d98b37210b9d4
-
SHA256
f41fe2a553f47eff85da519b3bae53d98401c501a95b789df2e26e2a42cf776a
-
SHA512
ab213730121a25f33bd2e2adf049f429d7937070930cd4bacaf05166706278fab69488b6cba6b0759fd8a7c9f6315302372eb4cd062f2832706e8b703e762732
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Cvnh:6uaTmkZJ+naie5OTamgEoKxLWUMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f41fe2a553f47eff85da519b3bae53d98401c501a95b789df2e26e2a42cf776a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections