General
-
Target
ad6073c8a592cac0d1817e2ec9839684254122aab1cea99c6c37ffd144910c8c.exe
-
Size
707KB
-
MD5
f99291d09ea95b78c7212acd1b4ae33f
-
SHA1
8885239124f220e994c5191201d7fd7f38930270
-
SHA256
ad6073c8a592cac0d1817e2ec9839684254122aab1cea99c6c37ffd144910c8c
-
SHA512
c7645e31b507fdb8d922c5aff1c98423ad747ba8f643095846974ce7ebc71a95597b70747d137e0afe4b146bed70f051ce7966d753d4f2646aebf5ee557f2a75
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8nvnh:6uaTmkZJ+naie5OTamgEoKxLWGvh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ad6073c8a592cac0d1817e2ec9839684254122aab1cea99c6c37ffd144910c8c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections