General
-
Target
15c975e5a8de4b901df0b96534ea44e9c9d2a09c90a3785d7d5e3e0054b37d6c.exe
-
Size
707KB
-
MD5
759600e0426f860e47959414c0835775
-
SHA1
871b7b38c670c6a88728aeba4df184348d6fef1f
-
SHA256
15c975e5a8de4b901df0b96534ea44e9c9d2a09c90a3785d7d5e3e0054b37d6c
-
SHA512
a15c3d5b1ca0e11b473b1a9c79673b147e97c22cf385a4a53efbccaa031baa2d3a14330605eb8845b7bc24d02820cd6c8e9cb40003cb44d85e6e0a5ae708e767
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q88vnh:6uaTmkZJ+naie5OTamgEoKxLWRih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
15c975e5a8de4b901df0b96534ea44e9c9d2a09c90a3785d7d5e3e0054b37d6c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections