General
-
Target
453a962ed3e41038a2ada2c34d93cd4eb89c41f7cff83d415f77d4d8120df6fe.exe
-
Size
707KB
-
MD5
3af011ad1d7cfc5f4f34fec1d0628d6e
-
SHA1
60221012fee1e7b39c37810ac318f1361f8299bd
-
SHA256
453a962ed3e41038a2ada2c34d93cd4eb89c41f7cff83d415f77d4d8120df6fe
-
SHA512
c62993a2660c3606224bc93632d7b2ec5f7c3b7405a5d01792de421d9777584b775a154713ce049fe44b7eaee6523d135c1d02623deed28d0f0d6e183f730dfc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWpHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
453a962ed3e41038a2ada2c34d93cd4eb89c41f7cff83d415f77d4d8120df6fe.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections