General
-
Target
1281b71c1d2529d75c301ccc6dc076243fdcfe7c988cea87090a35e3e3473f12.exe
-
Size
707KB
-
MD5
5b4b54801e6a01ef0d5bb3d850ade71b
-
SHA1
717da48d3acfed1e9eb8efac5085615aaa5750dc
-
SHA256
1281b71c1d2529d75c301ccc6dc076243fdcfe7c988cea87090a35e3e3473f12
-
SHA512
f97cb003d522c9df2173379fa1a8022837fd4e9eeb8caa99fdd8f2011dd4511b1d9fecc54e58e58de759bc9f7f7373779ebd81b4b2e9e157c924522f3d08e7a0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z88vnh:6uaTmkZJ+naie5OTamgEoKxLWaih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1281b71c1d2529d75c301ccc6dc076243fdcfe7c988cea87090a35e3e3473f12.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections