General
-
Target
0543beb1968439ca6d115bfe0790ff65f832bd56b3c2205d21748f1804acd2ed.exe
-
Size
707KB
-
MD5
9f9eab1ee647b3c420aaa1362c139d74
-
SHA1
426fdaa3588e986131338d46c774c3eca8dbc541
-
SHA256
0543beb1968439ca6d115bfe0790ff65f832bd56b3c2205d21748f1804acd2ed
-
SHA512
d8db665a73fb227cdb844349ac16221bd2b7cfc775f64b531c470d711e34a6d0bb30ad93c6f493ddf75f9b3545c9ccfca1f1839549f9dcc9313e70664ac1d5ac
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Hvnh:6uaTmkZJ+naie5OTamgEoKxLW1Ph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0543beb1968439ca6d115bfe0790ff65f832bd56b3c2205d21748f1804acd2ed.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections