General
-
Target
15caa2dbb512f5c79fba4323019e1a63057d39d6d043a64f067399652d622884.exe
-
Size
707KB
-
MD5
6f9307cf5bf5994c49d6af7b4c75a88b
-
SHA1
dfca818ebd9958c790c7ef98c6f27f56636602be
-
SHA256
15caa2dbb512f5c79fba4323019e1a63057d39d6d043a64f067399652d622884
-
SHA512
52a4873bb1144fa7f0351ae427720f49c65a190d43775e4539961c684d0d7bad7f44f6fe5c8d6a32dcab2b96156724215b47e3349bcbda5602d1a270d55b1209
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1u87vnh:6uaTmkZJ+naie5OTamgEoKxLW1rh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
15caa2dbb512f5c79fba4323019e1a63057d39d6d043a64f067399652d622884.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections