General
-
Target
0c1b4b44f89a5a42eea573536d5d1732d4a223c687a7b5fafa4f69151f65466a.exe
-
Size
707KB
-
MD5
83ab9aa7d252338a8deca7b5ffd76e97
-
SHA1
4d9f8e431c57839cf737c0c299c9395b0e873805
-
SHA256
0c1b4b44f89a5a42eea573536d5d1732d4a223c687a7b5fafa4f69151f65466a
-
SHA512
4a4386f6130159f91df8f6d27bf6ac959ed60ec87dc32f4478c4089e031a41674271b8a4a19212f964656d8e7446fd65ab93e9bb20726dcf0faaeecdd2f5b548
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8svnh:6uaTmkZJ+naie5OTamgEoKxLWSyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0c1b4b44f89a5a42eea573536d5d1732d4a223c687a7b5fafa4f69151f65466a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections