General
-
Target
505370bc5d2da28ec2ae9d85339bf877e34e62524624d3b20a20745dd0296740.exe
-
Size
707KB
-
MD5
a1ed9e481058dd6960a88de1d8d0a7ef
-
SHA1
556f16fff198d85e958b9bcb7fe964d171d0d2d5
-
SHA256
505370bc5d2da28ec2ae9d85339bf877e34e62524624d3b20a20745dd0296740
-
SHA512
8d67a5a8a92a72ddc1e6a041dd6327e4b130a6e27269186bd35ff021471b9610003de97392ee32a105b54b010687c93de75f60cb6f20573ccf12549ee7819e5d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128Uvnh:6uaTmkZJ+naie5OTamgEoKxLWlqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
505370bc5d2da28ec2ae9d85339bf877e34e62524624d3b20a20745dd0296740.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections