General
-
Target
ffe714d45fa951db2233dd5a6ca56d1f064bdb83b00e13f9a3128a528287b027.exe
-
Size
707KB
-
MD5
1c165d10d1825c1bd4d0303b5fbe5bba
-
SHA1
713fcc8ced7757557e16b1cb1485b34e8a0bb50d
-
SHA256
ffe714d45fa951db2233dd5a6ca56d1f064bdb83b00e13f9a3128a528287b027
-
SHA512
dc69bebc873f9d5a370448c20501596177c24a864e8d2edb83a54a5937c3d9e2b27fa3232319a8ab7987489015293318c30ecc6697ea10b6c4ffb6ff8e2b10ac
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Nvnh:6uaTmkZJ+naie5OTamgEoKxLWS5h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ffe714d45fa951db2233dd5a6ca56d1f064bdb83b00e13f9a3128a528287b027.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections