General
-
Target
0465b95182feab695a8af6b07ccfc2b3335befc1f2bab43be598ea6f770b1e2f.exe
-
Size
707KB
-
MD5
62f77eea07414e7cbbbdc2657dd0adeb
-
SHA1
0e8a2fc84ad5e6199002406d0293f4d4a48d63b8
-
SHA256
0465b95182feab695a8af6b07ccfc2b3335befc1f2bab43be598ea6f770b1e2f
-
SHA512
5ee2c6dfbb44dae8fe842a3c82986b1a08c188f40f45e367d51b099ed335ac08a51b34ab28c14e96ab73cdc54360ac7427ffb9dac3e2b590a971b62d5354a76e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108xvnh:6uaTmkZJ+naie5OTamgEoKxLWvlh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0465b95182feab695a8af6b07ccfc2b3335befc1f2bab43be598ea6f770b1e2f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections