General
-
Target
11999eb51db8ca4005d146b9381364ab20eaa72e974e41ce9e7656f73649ba50.exe
-
Size
707KB
-
MD5
0e9f35311a6c43978f1e987c397e22bc
-
SHA1
ee68ed983d0ec6b80896cecace9741b05989afd7
-
SHA256
11999eb51db8ca4005d146b9381364ab20eaa72e974e41ce9e7656f73649ba50
-
SHA512
9cdfbe98d31728cfff8272948f0962a1af04ac4923ba92f1e62aa84e6b07bbe20ee6b2cb8536b114bb014a1809508e0157a4db40d37d8e3186cad5df0a446e1b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x88vnh:6uaTmkZJ+naie5OTamgEoKxLWkih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
11999eb51db8ca4005d146b9381364ab20eaa72e974e41ce9e7656f73649ba50.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections