General
-
Target
10912dedd3511eb9a65bbe706151901bf10eaa25c2089a1ba8e49eea9e8fa558.exe
-
Size
707KB
-
MD5
91971973c6184d08d1dfdac6fc045513
-
SHA1
40afe2936b1bc16a2b7f63cbb2b1fd963de8b734
-
SHA256
10912dedd3511eb9a65bbe706151901bf10eaa25c2089a1ba8e49eea9e8fa558
-
SHA512
4b466e3290fc35d22df088ee5b1a0f6b76affa71b4ca65cdd755c9d93e98605274830349a1730187dc43f23e8db0a5e98dd0c0d21f8fdc84f60babce913c7af7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8zvnh:6uaTmkZJ+naie5OTamgEoKxLWbzh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
10912dedd3511eb9a65bbe706151901bf10eaa25c2089a1ba8e49eea9e8fa558.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections