General
-
Target
fd13a25cddf5609f95a0b776f866a099931c4b26f126a8677f3155d67fea97a7.exe
-
Size
707KB
-
MD5
841601f6c7cf75ea9dc76f7e3e6c6f51
-
SHA1
1aa9882e9b5c8e084fc12db23dc63f58927c0680
-
SHA256
fd13a25cddf5609f95a0b776f866a099931c4b26f126a8677f3155d67fea97a7
-
SHA512
b53c4bc049489f46eba0c139cda6512c822f8bb8c622a1ffd441cd0ef25dcbc1927ce386d2f9e3fc2ec646dd141cd48fb793c02dffc21da65436b82ee009b9d4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWcdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fd13a25cddf5609f95a0b776f866a099931c4b26f126a8677f3155d67fea97a7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections