General
-
Target
49811b80dfb53c80ec77dadbdee9a8659eaf62473e9ba905e844392fbae0cf76.exe
-
Size
707KB
-
MD5
f17b5e16ca1ee0d7602abcf542d47038
-
SHA1
84c03f2b572d0b71f8875704276e6abf4949d704
-
SHA256
49811b80dfb53c80ec77dadbdee9a8659eaf62473e9ba905e844392fbae0cf76
-
SHA512
53ff972790a4ef4d69715264e925ac8ca1c167fb78a1029abec4b38c437ed4b0e27fc7c01c91d7b94de8048098cb9758e3a2e78e11cb880c7298a18e877da749
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8fvnh:6uaTmkZJ+naie5OTamgEoKxLWH3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
49811b80dfb53c80ec77dadbdee9a8659eaf62473e9ba905e844392fbae0cf76.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections