General
-
Target
284a01813de155164353300f90463e7ed989681b5d70086df45c846cf9d5ca87.exe
-
Size
707KB
-
MD5
f55767b5714b5c74958df2bcc9152699
-
SHA1
23d710d4d347584b9a8b7182c91702cbd167d5ef
-
SHA256
284a01813de155164353300f90463e7ed989681b5d70086df45c846cf9d5ca87
-
SHA512
c79f687e8945723271c9899b1b5183271cdbbadbcad289facd3c6fc1c1fef194f47a911addfb26d992ba67eac749bdba9f6fc381800d198a115420db5a097eee
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8dvnh:6uaTmkZJ+naie5OTamgEoKxLWVph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
284a01813de155164353300f90463e7ed989681b5d70086df45c846cf9d5ca87.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections