General
-
Target
44bdd6dc049aaa456e0c9eefebcf97baec701d769365a0254904c174c6edaf47.exe
-
Size
707KB
-
MD5
c09c5ab908acc09d9e7533af16acd521
-
SHA1
8c1a31e84331861569299ff25de6ab2fa166436c
-
SHA256
44bdd6dc049aaa456e0c9eefebcf97baec701d769365a0254904c174c6edaf47
-
SHA512
a8987aea53d34eb824c5786af5cb5bc7625b15cc59b61df4c95b55e9798ff539bbbe2ac12e0b772dd0540dbc685bcb0e444995ca0998079bbd405ff845129ff0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8Ivnh:6uaTmkZJ+naie5OTamgEoKxLW82h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
44bdd6dc049aaa456e0c9eefebcf97baec701d769365a0254904c174c6edaf47.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections