General
-
Target
fa7023a896019494b5d6f365d586506b40d80db2f3c95dd3d1efb5666e884d84.exe
-
Size
707KB
-
MD5
19a4e9a77d92482e81620722a2fb6a18
-
SHA1
d036ecb6a1828c5fc09284a298f7605c70c70f43
-
SHA256
fa7023a896019494b5d6f365d586506b40d80db2f3c95dd3d1efb5666e884d84
-
SHA512
547466abcc530f049b596f2178f77f6374fd07a98fce9898487cdcb9e1f9449f4f3fe23bc762268d00e8f12f2d9e0620c9250c8d26dff9d488a2b8b774320608
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWHQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fa7023a896019494b5d6f365d586506b40d80db2f3c95dd3d1efb5666e884d84.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections