General
-
Target
481d3bac83b4668965d6096f475d581af925f742361a2a416e3de0e71539c2d5.exe
-
Size
707KB
-
MD5
f9a14501298c01f4d6bb3e7d890d219c
-
SHA1
8500c665a7d55156598e465161b03e7e0ef84c23
-
SHA256
481d3bac83b4668965d6096f475d581af925f742361a2a416e3de0e71539c2d5
-
SHA512
4cf0e29bf2d6dc6bea70421049288cae56875d54829233b4b423ba13dd4dfc2de9289c1ef5d516e0abb933531f683d35039e0604ec695b038b133d4e156b0003
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1e88vnh:6uaTmkZJ+naie5OTamgEoKxLWdih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
481d3bac83b4668965d6096f475d581af925f742361a2a416e3de0e71539c2d5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections