General
-
Target
49db25d262869de59c2c278fa592ceaa9dbce5cd60021ac85efbef863f338d17.exe
-
Size
707KB
-
MD5
080b02c77098af7571e0a7d511d5a7fb
-
SHA1
f273ad951727d2b7cdf76e2e30cf8771828a5797
-
SHA256
49db25d262869de59c2c278fa592ceaa9dbce5cd60021ac85efbef863f338d17
-
SHA512
1e2421b8f4731a90e524d71b39ee20ab0df2e58ea9c0760b0254a4f35cd6e5e03ae490fdda420da7141e781ff8f7b5ecde444427cbe9c654f6d57f74e5bc478f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWURh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
49db25d262869de59c2c278fa592ceaa9dbce5cd60021ac85efbef863f338d17.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections