General
-
Target
ffb0cbcfb5ce3cf3943def6225d405ddee4f19632d48b9ee5e3144abf040dd92.exe
-
Size
707KB
-
MD5
3a745d53168f4f2ffd0f6842321b012c
-
SHA1
5d4d9a83368e457d298d7ed40f5ed6f19e9ead17
-
SHA256
ffb0cbcfb5ce3cf3943def6225d405ddee4f19632d48b9ee5e3144abf040dd92
-
SHA512
a4696b42ce9b845ad0712c79a6fe97df65dc4ec20407e74c4e081585ba20bc7ce4374d4cab0f0406eba7fe83fd4ca5eadae109f6f690ee69f775b2a43ff92fd4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118vvnh:6uaTmkZJ+naie5OTamgEoKxLWgnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ffb0cbcfb5ce3cf3943def6225d405ddee4f19632d48b9ee5e3144abf040dd92.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections