General
-
Target
f738e25f79248bf93e7b02331dbec3dae53e25c1df81499cb48c2f3bbec6b615.exe
-
Size
707KB
-
MD5
dee6e492f43d0adbb353cc4a57d6a7bd
-
SHA1
799a95efb8ac4cd0e87c2469e5901586c63a54ad
-
SHA256
f738e25f79248bf93e7b02331dbec3dae53e25c1df81499cb48c2f3bbec6b615
-
SHA512
2d0d21a20f0286d5c5a950c0ebab431cb968b01db27da98ab95089b955a2662df300bcf7a121281977f07e357317b3c34f81759be12b087bfc158e99710d96b3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8svnh:6uaTmkZJ+naie5OTamgEoKxLWhyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f738e25f79248bf93e7b02331dbec3dae53e25c1df81499cb48c2f3bbec6b615.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections