General
-
Target
45ecb4fa91ae94de2a86104f79b223ec7fa428deda1f913336eb8bd1f22afb72.exe
-
Size
707KB
-
MD5
fca37aa8ccb280662c2f085f1003296c
-
SHA1
08462fda601fadc914aa6b84134f21a83c79bf40
-
SHA256
45ecb4fa91ae94de2a86104f79b223ec7fa428deda1f913336eb8bd1f22afb72
-
SHA512
19790bca00785a7bce1647e9277c4b8d6653ace1000b910a8262027d7f2bab511c5948de85b3ff2452d8426ea5bb992d03a1ce7dd6fdbe38cb24cc1fb1238937
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158Zvnh:6uaTmkZJ+naie5OTamgEoKxLW0dh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
45ecb4fa91ae94de2a86104f79b223ec7fa428deda1f913336eb8bd1f22afb72.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections