General
-
Target
10b37bf0dd0824ef2f07785a2156b08f4f59706000de10255e31a1aad741b42b.exe
-
Size
707KB
-
MD5
bdce2fa3d45e10dcb311fe667708e1b6
-
SHA1
f4301faa5f472e8cadb76ea1b02736cc2e67f075
-
SHA256
10b37bf0dd0824ef2f07785a2156b08f4f59706000de10255e31a1aad741b42b
-
SHA512
3d5279d37842664901e4637053c52b6f1ce1c3ed7490cebf29e839b9c851004eb2a723d69d829662a6228b6556e743f76432e8b88f4526784d5f16b860b1a5ee
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1089vnh:6uaTmkZJ+naie5OTamgEoKxLW3Jh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
10b37bf0dd0824ef2f07785a2156b08f4f59706000de10255e31a1aad741b42b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections