General
-
Target
f4c4339d42bca4622d35f8cbbee50cd44749c556c46c9a9eb4d7feb9c6224792.exe
-
Size
707KB
-
MD5
5aabe72c98b5071bed73f7dd4f581e8a
-
SHA1
e8b301bcc6532e2697d7d7a7f2e3490be10f5e6e
-
SHA256
f4c4339d42bca4622d35f8cbbee50cd44749c556c46c9a9eb4d7feb9c6224792
-
SHA512
4f4aff105ab1ee35a244a32be701c564675cf5ed0046cc51949852aa6d0a5e40c84f6682dc614375ccebd09c4a511e754c21859430e97991e29b78301fa8ba16
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148Jvnh:6uaTmkZJ+naie5OTamgEoKxLWTth
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f4c4339d42bca4622d35f8cbbee50cd44749c556c46c9a9eb4d7feb9c6224792.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections