General
-
Target
133cbb66cc173ae26a9b5694678c6e908b2f747414b04ae7d9e82c94d5983911.exe
-
Size
707KB
-
MD5
1ee2554f0f4d2e1cd371ecb1e5a1d75a
-
SHA1
aa6d0164067571d1719a6a44d5d2ac5ab3243a3d
-
SHA256
133cbb66cc173ae26a9b5694678c6e908b2f747414b04ae7d9e82c94d5983911
-
SHA512
0c24bf60fde7256a4a216aec80ded4be9c8fdb1d8491e5578f46866d7dd4ef6eac46bdbc133d718d7bc8990a0f7ac611613edde6e31e58458978df51e80accf2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h88vnh:6uaTmkZJ+naie5OTamgEoKxLWcih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
133cbb66cc173ae26a9b5694678c6e908b2f747414b04ae7d9e82c94d5983911.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections