General
-
Target
f62d2c56577019a50ba4ada266f05688de8247ac329ec269b1298a08812f3d68.exe
-
Size
707KB
-
MD5
bf829ab7624b96d18131803c0d5efb78
-
SHA1
de029db02e73c2fc04eeda9a335bc6ffd709e989
-
SHA256
f62d2c56577019a50ba4ada266f05688de8247ac329ec269b1298a08812f3d68
-
SHA512
25c5748a440e572c9a4c6adbaf69de081b289fd93845c9878ce6e0c3ba69d4e127883e8f57071a5cff452b003f665dd1bdd9eea3fe8e65ae36f930572c144456
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1a8svnh:6uaTmkZJ+naie5OTamgEoKxLWZyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f62d2c56577019a50ba4ada266f05688de8247ac329ec269b1298a08812f3d68.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections