General
-
Target
11b42ed2c3007c8c65637f160334b324f7ef4f1dbc06f4df5e871a8cb06311a6.exe
-
Size
707KB
-
MD5
4f5d5a70d084c67e0e6c04d0335557d7
-
SHA1
e3d96d88cba210f2ef9812f48b4c2cd19bf7f9a3
-
SHA256
11b42ed2c3007c8c65637f160334b324f7ef4f1dbc06f4df5e871a8cb06311a6
-
SHA512
5229120a8d627d05c2cc09a9a28c961ac34818486082ebe8f21e3d6a5970abed53e95824cc4cbde090cb747f59f19596b74a29508978cce50df0096620e5eca8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWsHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
11b42ed2c3007c8c65637f160334b324f7ef4f1dbc06f4df5e871a8cb06311a6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections