General
-
Target
945f43bc4c738b8ba4384ec99d616b4aca85cf192c3c91f0f1ff0551b7d4f7ae.exe
-
Size
707KB
-
MD5
d6c827629a9f7fed2cb8b3fc17ba3e7d
-
SHA1
1b6c1ecc6a49549200451631a08e483e7edffbdb
-
SHA256
945f43bc4c738b8ba4384ec99d616b4aca85cf192c3c91f0f1ff0551b7d4f7ae
-
SHA512
c65bb4fe6304725a945657c35e075076c7fe6bf39d98caaf984f98210f7ef9de868470762dfbd75667ef293d0684236c4aba30e47b81fbcb262095b93e718ecd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R8qvnh:6uaTmkZJ+naie5OTamgEoKxLW8kh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
945f43bc4c738b8ba4384ec99d616b4aca85cf192c3c91f0f1ff0551b7d4f7ae.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections