General
-
Target
520b23b17c852684feb449852b313017ba6277424a30c5aef0ead23b8cc2bea2.exe
-
Size
707KB
-
MD5
b791c6f07f4508aa3515ad5901b0e83e
-
SHA1
2b66b83329fec6a3f74b011ffa0ed3cc0779d74a
-
SHA256
520b23b17c852684feb449852b313017ba6277424a30c5aef0ead23b8cc2bea2
-
SHA512
0f805dc284e670582e800273aad934dbdf2cc40bdd9a5753b04524900a06ee1e53419c89663df0bef84446cfa9111386833605bcf5f429579ad9d40f9f42e17d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8dvnh:6uaTmkZJ+naie5OTamgEoKxLWPph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
520b23b17c852684feb449852b313017ba6277424a30c5aef0ead23b8cc2bea2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections