General
-
Target
f76136b91409ef8e3a59d3cc17c0c9cd0a0aa09e5905c2ec90ef028a23db1a5c.exe
-
Size
707KB
-
MD5
7621159564b7cdaecdaf5496c3d103b4
-
SHA1
df101b532d6fb06ed179379b6c94831061cfaed9
-
SHA256
f76136b91409ef8e3a59d3cc17c0c9cd0a0aa09e5905c2ec90ef028a23db1a5c
-
SHA512
9dcc5c09e29ea2be0bd8f369bbb6629f92c2a4cf2095feabfde8ce837cbb5a7ec1db53b4587fea076602e989016357f2763fcac4c8d09a3d8b938863892124b0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8nvnh:6uaTmkZJ+naie5OTamgEoKxLWUvh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f76136b91409ef8e3a59d3cc17c0c9cd0a0aa09e5905c2ec90ef028a23db1a5c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections