General
-
Target
0542b564de99c09c6de9b8329b70a4e959e7e46c51de441ef141f20f99088bff.exe
-
Size
707KB
-
MD5
33ce7055e3d119c7092ecb87d50b8c52
-
SHA1
aad558874432faab595c00b5dfcfef6529eafa20
-
SHA256
0542b564de99c09c6de9b8329b70a4e959e7e46c51de441ef141f20f99088bff
-
SHA512
32d2edacc6d2c2a37d07b4ac6b9299bace681746547fbdd504a21238d562160608594bc807967ed077693bcedd27cec38c08313c54c3f8865be83960560105e3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8Svnh:6uaTmkZJ+naie5OTamgEoKxLWe8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0542b564de99c09c6de9b8329b70a4e959e7e46c51de441ef141f20f99088bff.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections