General
-
Target
4ab300db954ef0aa425a4e4ddc9d3d97bfa8a488b33fe583ee57e0803b9f7d04.exe
-
Size
707KB
-
MD5
a70765021b1c96ace1c17b2079ded47b
-
SHA1
0a5969d5f829a8cef09676dd6ac7a7d26234af71
-
SHA256
4ab300db954ef0aa425a4e4ddc9d3d97bfa8a488b33fe583ee57e0803b9f7d04
-
SHA512
1a43248726f47205b2aa4b9219820897787c3a12a7eea347b1d5159170dad0685146143212e9fde072362c772218cccd289b16ca1f7dc33c6d75ecea2c295596
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWtOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4ab300db954ef0aa425a4e4ddc9d3d97bfa8a488b33fe583ee57e0803b9f7d04.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections