General
-
Target
492a8102b019e501243c25724f9d748f996068f77e91155968ffeb5147d64712.exe
-
Size
707KB
-
MD5
e2592b4bf40a7ba9146ca1233de58931
-
SHA1
c4b5d9d8158317ad89f56e3be8f79e93786c0b46
-
SHA256
492a8102b019e501243c25724f9d748f996068f77e91155968ffeb5147d64712
-
SHA512
42d8b983e7050ce164efd9a89d352b5111ca01e15f843cbeb57681a1e72fcb08970b3a27c72274884a77d801c04dd671abaaf9d2dbeddd50ee0a1efaf25320a0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z8Avnh:6uaTmkZJ+naie5OTamgEoKxLW6eh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
492a8102b019e501243c25724f9d748f996068f77e91155968ffeb5147d64712.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections