General
-
Target
45d6d36dec68a9608f2b99425268985f721df94236e647e4004fb6d84285d3cb.exe
-
Size
707KB
-
MD5
e55975567dc2132cf7a79e0bb4469278
-
SHA1
6ab5a4dbda3caaaa9c9bcaecb2a0165241a5c442
-
SHA256
45d6d36dec68a9608f2b99425268985f721df94236e647e4004fb6d84285d3cb
-
SHA512
70b2b9f1630ea15f4d99ebf86090e878dc16f03aa59f91de5a9eadaeeb0c6b200260e8c55e12163d04d8405b1021fdbf4dad19077ca28e494b9e04b7203aae08
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8Lvnh:6uaTmkZJ+naie5OTamgEoKxLW/bh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
45d6d36dec68a9608f2b99425268985f721df94236e647e4004fb6d84285d3cb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections