General
-
Target
fb2e5e6b043995ecfc09a43373d6f33d0fb57b1850478f4c723e213e05619024.exe
-
Size
707KB
-
MD5
704d72766852bca9aad0cddd0cd77ab0
-
SHA1
c24269b08c36dbdc5e1ef280856012b399038130
-
SHA256
fb2e5e6b043995ecfc09a43373d6f33d0fb57b1850478f4c723e213e05619024
-
SHA512
05e609fb295ac1d392616c6108d726159c4a021f174fd8f92e5411fc539235ec4677cb194ed1e7e599fcaefed099720d1b3f76dba1fb0f5434a8340fb139cd3d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s8Zvnh:6uaTmkZJ+naie5OTamgEoKxLW/dh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fb2e5e6b043995ecfc09a43373d6f33d0fb57b1850478f4c723e213e05619024.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections