General
-
Target
fafae1d631b956d8df4d3dd861fd9c07d0ecfad9d336eb6cf2d9f7b5ec4e0f40.exe
-
Size
707KB
-
MD5
51c2c051cdde3f31d70c0b2f772480eb
-
SHA1
62621196d7678ff7669a403dcc5e7744c6088778
-
SHA256
fafae1d631b956d8df4d3dd861fd9c07d0ecfad9d336eb6cf2d9f7b5ec4e0f40
-
SHA512
7e998d53fe944eae8a51a9094926d0a5b54a15ccf8061c47e76c9da3c83b2557a360825b844e96dda05d3347ca810c6d88c395087459d6d0538d94c468725c8e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c8rvnh:6uaTmkZJ+naie5OTamgEoKxLWP7h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fafae1d631b956d8df4d3dd861fd9c07d0ecfad9d336eb6cf2d9f7b5ec4e0f40.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections