General
-
Target
ffac70a90297489cbf417d70ed7a0709c74dc2a22986730a2af09c1cd5ab665e.exe
-
Size
707KB
-
MD5
a7e622e02f9d256e95cec450c9529dc1
-
SHA1
a24c0050c5ed35d7034c31966ba6c2c933aefb0f
-
SHA256
ffac70a90297489cbf417d70ed7a0709c74dc2a22986730a2af09c1cd5ab665e
-
SHA512
d2b8fcbe9de87c300be58129549cc0d0ab48c364d7302a1b5228457830850b26ac67735b80574d8cb0c1986435626c150cc69ed74b5db71c057a35516a65bd6b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1w8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWzQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ffac70a90297489cbf417d70ed7a0709c74dc2a22986730a2af09c1cd5ab665e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections