General
-
Target
fa08fd04b4d4977ea022c8ce85457a6fbc802464596d445d3fb8a755206b7e20.exe
-
Size
707KB
-
MD5
959830ee1f33f71200dfcaf6f0978ddd
-
SHA1
d0541ed9b1d931319639d0898f15fcc70a7a097d
-
SHA256
fa08fd04b4d4977ea022c8ce85457a6fbc802464596d445d3fb8a755206b7e20
-
SHA512
26e4aa41270e1750aa0c447f3bb0a5e5630ad89dce08c8943f1f88d218756942199ceb5e4e61c0661b466bd10b34d799a2675c22c4c61fd7ac08da349a31ff1d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W83vnh:6uaTmkZJ+naie5OTamgEoKxLWFfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fa08fd04b4d4977ea022c8ce85457a6fbc802464596d445d3fb8a755206b7e20.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections