General
-
Target
4d055a23b5f8f9b46f0e65ae0a8d05cb21826e7cb5e07f5237b7c997f0685ee6.exe
-
Size
707KB
-
MD5
c628b46faed8d072c136c923c83580eb
-
SHA1
20d25b084bd57958337bf1be71789a7d24c7d395
-
SHA256
4d055a23b5f8f9b46f0e65ae0a8d05cb21826e7cb5e07f5237b7c997f0685ee6
-
SHA512
2b5353e23e94435f8df27b86c1fd41606b86d30b4a7588e76c97f2274562bd7d032ca4a1f43d8558acf73803a439e706d519557cafcd80d892f1a04b3817a186
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8evnh:6uaTmkZJ+naie5OTamgEoKxLWOAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4d055a23b5f8f9b46f0e65ae0a8d05cb21826e7cb5e07f5237b7c997f0685ee6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections