General
-
Target
b772c899e8d003b8c171e85eb30adc2e8c292e27400b9ab9277a69534f26536a.exe
-
Size
707KB
-
MD5
a32e913680605a928ed9c2b41d7a408a
-
SHA1
19735308e6a359a49039146c1f2f3477aa195b1f
-
SHA256
b772c899e8d003b8c171e85eb30adc2e8c292e27400b9ab9277a69534f26536a
-
SHA512
4fa5acf71d143685a5f1d8f0a7f63d24a28669f1b4b5b2ed606433892bd4f0e38d4bfbb34046a6500e671909916426ff4555412a9bc124f7d4878bb8d0036c4a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198Zvnh:6uaTmkZJ+naie5OTamgEoKxLWgdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b772c899e8d003b8c171e85eb30adc2e8c292e27400b9ab9277a69534f26536a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections