General
-
Target
22578b03abd497c6a4b83b9016508bea9c194616997e407ba3f845a3b1894955.exe
-
Size
707KB
-
MD5
8d5bf8321045201169317a68e7559add
-
SHA1
9beba95a67c37aea9a615323af00c71fc4996769
-
SHA256
22578b03abd497c6a4b83b9016508bea9c194616997e407ba3f845a3b1894955
-
SHA512
c6469a222207246bb22412d4e142efe45c23d3d8aa4e3fa354aa60f0800afa6494a861639ae031278272ae40c80b9ff2586b90d2941608895d99d1bad7d950f1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWfOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
22578b03abd497c6a4b83b9016508bea9c194616997e407ba3f845a3b1894955.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections