General
-
Target
22a7a8cdd74eee3c5bc933b0fa4ebc1d2e306362930975c43ae86ab02d9b7a7f.exe
-
Size
707KB
-
MD5
19261b45c5cd857f50c8ff16bf77cb83
-
SHA1
f4ef2b443d9c7512e8b7f71082c398c4f1f55b8c
-
SHA256
22a7a8cdd74eee3c5bc933b0fa4ebc1d2e306362930975c43ae86ab02d9b7a7f
-
SHA512
02a1d9026c733c8b5962cbd5f44809bed89a67b96ee52d5109f167a5291d1c7e5aad893c29250c2d9e26f40c002366a960c40877e210bbf5aab94c4485bca19f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Cvnh:6uaTmkZJ+naie5OTamgEoKxLW8Mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
22a7a8cdd74eee3c5bc933b0fa4ebc1d2e306362930975c43ae86ab02d9b7a7f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections