General
-
Target
193df51de97c0d9355cf1ef102398f168752730898d87783d934bf91cb87ac61.exe
-
Size
707KB
-
MD5
d6d92de2b0d9ac5d982dae986332796f
-
SHA1
636401e21a43c3f0e74c8a328d33583d6274127b
-
SHA256
193df51de97c0d9355cf1ef102398f168752730898d87783d934bf91cb87ac61
-
SHA512
c3d29a645d1e971f1697d93eb47f6a0fafc418a1585a59d875534b3194b86e9e48cb8258b18196656e81a699b9b6dbaa40986c9875305cd11735c40f9953c0ee
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q88vnh:6uaTmkZJ+naie5OTamgEoKxLWJih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
193df51de97c0d9355cf1ef102398f168752730898d87783d934bf91cb87ac61.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections