General
-
Target
1c931d168c8812a86a1a6bd91cb93e863a59f46e06d30908d21f8511603c58d9.exe
-
Size
707KB
-
MD5
c5cf52807b34484ff9042f6b368ab8ee
-
SHA1
0cbb8db78da5572a468420de79742c0efcc82dda
-
SHA256
1c931d168c8812a86a1a6bd91cb93e863a59f46e06d30908d21f8511603c58d9
-
SHA512
827cc6788c3d8537c1c4be0b5666aac57b9220758e407d05981bce5ace763c64a6233b9afcd342a28b2ee471c2449dd36cbd9fb039b88d0513fa7c8d32c2cc09
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S87vnh:6uaTmkZJ+naie5OTamgEoKxLWJrh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1c931d168c8812a86a1a6bd91cb93e863a59f46e06d30908d21f8511603c58d9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections