General
-
Target
153ac891f873982985f8277e2f65beea2f15ca2d39184be90dc5f1b6a3b2b16b.exe
-
Size
707KB
-
MD5
db01bb4d042a64bc781949164a090548
-
SHA1
d53102b758e1fe7f682b840d8b0cd90552ac395c
-
SHA256
153ac891f873982985f8277e2f65beea2f15ca2d39184be90dc5f1b6a3b2b16b
-
SHA512
8a8423ed42cb392f84ff0f267cdcdd83979c275cd7194b60d4292c1915cb58a9a5085132d0bc4321a9099ce8c08eda12375bddbcfb877037fea6538672d4879f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWDQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
153ac891f873982985f8277e2f65beea2f15ca2d39184be90dc5f1b6a3b2b16b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections