General
-
Target
ffcd8496a94f992e54d9b3b40af40e6d53b621dd9fec74afbefd7609f5bf2e27.exe
-
Size
707KB
-
MD5
40602c8e1ccbdb0aeacc59a578adfd61
-
SHA1
8e1cf7e5afdbd09683f6c7f5ef15ab13c53d3394
-
SHA256
ffcd8496a94f992e54d9b3b40af40e6d53b621dd9fec74afbefd7609f5bf2e27
-
SHA512
cc57ce2321986ff02aab7ab3a46c15a67f1c7a6391447b66460318536f84ffd065d704ce68627d6313a12a51d0bddf7f2146131b4d78dc14a41b3000e480c91c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Uvnh:6uaTmkZJ+naie5OTamgEoKxLWXqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ffcd8496a94f992e54d9b3b40af40e6d53b621dd9fec74afbefd7609f5bf2e27.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections