General
-
Target
fedcee4e6d2b0cd764a5ea72e08bc03cdb28de5b1b468f5ce989963c21fb7c94.exe
-
Size
707KB
-
MD5
9419c78031d563300a5aa9e32b42a5a1
-
SHA1
ddaa3fa7d66910deb5cc9429f6ce1107113d7004
-
SHA256
fedcee4e6d2b0cd764a5ea72e08bc03cdb28de5b1b468f5ce989963c21fb7c94
-
SHA512
30e72c3ec4635bd527a6b1284a8c4c4cec75ce4958e7362b3d8e7d4d429cb4f44b1fe0472fe0f0581f7e23f2d14ae43b56afe7c35338b1f034bc439671c1a13e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p82vnh:6uaTmkZJ+naie5OTamgEoKxLWMIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
fedcee4e6d2b0cd764a5ea72e08bc03cdb28de5b1b468f5ce989963c21fb7c94.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections