General
-
Target
506ff14918fa7c70eac7e4e7911bd51a33de1ee18a03d38d9734cdc49e43bdf4.exe
-
Size
707KB
-
MD5
4469f1ef034012c2bdace2e26b54dbfd
-
SHA1
dc9618056992308b77ce412c3c0f7b5f54b24b2c
-
SHA256
506ff14918fa7c70eac7e4e7911bd51a33de1ee18a03d38d9734cdc49e43bdf4
-
SHA512
935133e308f52dba57b3e4b1ca3c436d12ae007b3e1f6d0372dfaa4e855c56e5a2804bdfab8cbda257a64e5e1d3b1c33f826b2aec31e7b575f8ef45b567ec344
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118mvnh:6uaTmkZJ+naie5OTamgEoKxLWYYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
506ff14918fa7c70eac7e4e7911bd51a33de1ee18a03d38d9734cdc49e43bdf4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections