General
-
Target
f999d83efa6901ab32e13a4fa98b85c682a5d796687dbd7dfebb072c960230c3.exe
-
Size
707KB
-
MD5
e7d66384517335d69e84c509a900f712
-
SHA1
9f1b93047c8ef9eb3227cbfe0b206e74ef3f9213
-
SHA256
f999d83efa6901ab32e13a4fa98b85c682a5d796687dbd7dfebb072c960230c3
-
SHA512
bbd8f6ecf087de108e849f6bbb29a655ff90620659b5e8daffad7a6ee2ef642d3fe88e412934e3038f7e0b58c7ba3b994f7ede309097d6891be7c40ddc10eded
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198zvnh:6uaTmkZJ+naie5OTamgEoKxLWYzh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f999d83efa6901ab32e13a4fa98b85c682a5d796687dbd7dfebb072c960230c3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections