General
-
Target
fd6b1018e52710143adb354bc165ef6374e6dbd79691f2cd08387beea517fa7b.exe
-
Size
707KB
-
MD5
4504cd544b4a9eeca2cd89463c996644
-
SHA1
f8285ee3c0807b0a8a27114d15bde718a08225cc
-
SHA256
fd6b1018e52710143adb354bc165ef6374e6dbd79691f2cd08387beea517fa7b
-
SHA512
68b346e9e5d610723be4d1d174b340cb3fe10538cf13a59d9fb14bc2b062d4a6adbea68e57cd3db7b5763f2ff44a42e9e87c295caa4b6c6a00d391374e55c804
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8vvnh:6uaTmkZJ+naie5OTamgEoKxLWonh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fd6b1018e52710143adb354bc165ef6374e6dbd79691f2cd08387beea517fa7b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections