General
-
Target
49096b983d34e4d75cbca9737bd8562b8061fab8950fdb875a398c26bf57b340.exe
-
Size
707KB
-
MD5
d63ac9fefe4cfdaeaebeaa88d8712a51
-
SHA1
31f7a7cc698774a5a365bc5dd1a871978a2bd21a
-
SHA256
49096b983d34e4d75cbca9737bd8562b8061fab8950fdb875a398c26bf57b340
-
SHA512
5eae13d6e8118b0d3def34d78679b44d15b6c1d8c8b2e39b9ac5ff9533537d834f9b0fd3412bd769b3fa27ffdfc8d33031ff81012411208569e3a2d6b189cb32
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8hvnh:6uaTmkZJ+naie5OTamgEoKxLWN1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
49096b983d34e4d75cbca9737bd8562b8061fab8950fdb875a398c26bf57b340.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections