General
-
Target
0d522403a25e8a2b5705c30c085bf3903394ed3b8a98d3049e435f1435b3f068.exe
-
Size
707KB
-
MD5
dbb78f5932f8857db2cd22492d9a757a
-
SHA1
2189a955d5eb1114f3a65188b78512f3b4e746ce
-
SHA256
0d522403a25e8a2b5705c30c085bf3903394ed3b8a98d3049e435f1435b3f068
-
SHA512
322b055d169af95b68aad1caa15d247eed7a262927d9de5b50ba7d38b95ac52aa4ce0ed8b489c07bcfd330d89ac5fb4f06a009ff7f681eac5c4daa18f8315119
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Evnh:6uaTmkZJ+naie5OTamgEoKxLWV6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0d522403a25e8a2b5705c30c085bf3903394ed3b8a98d3049e435f1435b3f068.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections