General
-
Target
19f377b3173f3a97acf3cf49f781352ada5a091cd7fe59f7817cbae72bd2414e.exe
-
Size
707KB
-
MD5
ad446368ba4c360394f2eb50d9695d38
-
SHA1
8e25ea126fbee4e0fc4832bf41df587428108e3e
-
SHA256
19f377b3173f3a97acf3cf49f781352ada5a091cd7fe59f7817cbae72bd2414e
-
SHA512
f3bab689d5b1ca1ffe90b35359ea3494cb2f80cf8d1b264b5385ca69fc78e5d1cc01c35aef90a26a3e4bec1c9fbba3fa63465d8fe725f7b69e75534a9f68ee29
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R84vnh:6uaTmkZJ+naie5OTamgEoKxLWkGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
19f377b3173f3a97acf3cf49f781352ada5a091cd7fe59f7817cbae72bd2414e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections