General
-
Target
4d95e112ed37e5b51673be79e641485dbe5979f1823a60af833aee544902f4f1.exe
-
Size
707KB
-
MD5
ba7844c4798a5756c38c6aba038184d0
-
SHA1
3a9b106e9566782942ea576bc3ff065082cbd66d
-
SHA256
4d95e112ed37e5b51673be79e641485dbe5979f1823a60af833aee544902f4f1
-
SHA512
43addd7c78aba57876cba1278919e71641acc9c47fdf6eddeae21ab27f1d75ca9e4f81782ff3d25b4922d5c0be51fd92ae980fd58d28f5b21e95402d8a6b1e1c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8Nvnh:6uaTmkZJ+naie5OTamgEoKxLWT5h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4d95e112ed37e5b51673be79e641485dbe5979f1823a60af833aee544902f4f1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections