General
-
Target
facee9971734075ec644fa78c144a2892592dd30b37e686f2c1566d1d38d9de4.exe
-
Size
707KB
-
MD5
68b937beafde0cc01a4b40df0931bf1d
-
SHA1
9cfb68a760940484bede71fca999a7491a8f5259
-
SHA256
facee9971734075ec644fa78c144a2892592dd30b37e686f2c1566d1d38d9de4
-
SHA512
4b7c881a894ebf0cabf0ab71358f118e6ff0b5e21bc19bf7190d44d121b5daa6432017bbbdc89c1508e1c11518c51bed5e44653b78c125144e34c516f54f1eba
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8evnh:6uaTmkZJ+naie5OTamgEoKxLWiAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
facee9971734075ec644fa78c144a2892592dd30b37e686f2c1566d1d38d9de4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections