General
-
Target
1b20c6e62fed209bc2075711bced4898af8e06b4d05d0f45c30ddbbf6ed08d4c.exe
-
Size
707KB
-
MD5
5e9b42e06abce5880d3513df86e089b9
-
SHA1
7fcadefebfc9d497acf289792215b12d3de821f9
-
SHA256
1b20c6e62fed209bc2075711bced4898af8e06b4d05d0f45c30ddbbf6ed08d4c
-
SHA512
4b239b4d352eee67166c056ffc782998a9b9e69d0803381bb28d44de814f75fafaae4f6f5951efe950ee074f73611ba955688c88f6322b10810993ca826e58ca
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWHdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1b20c6e62fed209bc2075711bced4898af8e06b4d05d0f45c30ddbbf6ed08d4c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections