General
-
Target
15331a9fe96f4b91687cc70a102f15da10398ef18e02719c80928d2897a538c9.exe
-
Size
707KB
-
MD5
5fa6b795eb62fc7eccb40575b7d19f27
-
SHA1
9c40ea5237b5086385b1b80a19f3c2d3433cf3bb
-
SHA256
15331a9fe96f4b91687cc70a102f15da10398ef18e02719c80928d2897a538c9
-
SHA512
147a667ce397eba69c337969fd321888683e604d952e4d4b7de444b4c46b3c456e443ea585a855567a95bb21f433dd37b2d29a0e0317859f164deeebdeb75e0a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8evnh:6uaTmkZJ+naie5OTamgEoKxLWYAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
15331a9fe96f4b91687cc70a102f15da10398ef18e02719c80928d2897a538c9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections