General
-
Target
05d0f2d60f2e3afad24ec14d918a7be9d259db62fb2a9256920b19c1cea7a232.exe
-
Size
707KB
-
MD5
182e1b6ff685a561a8ed51b431957df9
-
SHA1
0e90245d72fa99206f4e3f8c3bff3bb404d50a4e
-
SHA256
05d0f2d60f2e3afad24ec14d918a7be9d259db62fb2a9256920b19c1cea7a232
-
SHA512
a378bd41f7313d4499a3fe8520b5a13b431456bfa08bbffa8c0888cb3a1e6b223a9ed3f4d72ca6442e3f7ae956d7afd6e5ecf4f35c39a1b5e0179e6fa600b4d8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z84vnh:6uaTmkZJ+naie5OTamgEoKxLWqGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
05d0f2d60f2e3afad24ec14d918a7be9d259db62fb2a9256920b19c1cea7a232.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections