General
-
Target
1bb4e6243a05c89b4b0baf4c487be10bff8f541b7c5ac88ea1d4d947eee0a84c.exe
-
Size
707KB
-
MD5
2087409630f12f84cca9e35c13c880b6
-
SHA1
a333c3f16f1ca258652d60ee1110011fdcf71fd7
-
SHA256
1bb4e6243a05c89b4b0baf4c487be10bff8f541b7c5ac88ea1d4d947eee0a84c
-
SHA512
52ce4300a168f4f4c26db5a844ffc3cfc669f6a11d8825235c2e52a683ba408b28b03335ad4fd9a58bd750d6d7882f48a677a6013999382ce247a0188c08972b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1j8Cvnh:6uaTmkZJ+naie5OTamgEoKxLW6Mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1bb4e6243a05c89b4b0baf4c487be10bff8f541b7c5ac88ea1d4d947eee0a84c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections