General
-
Target
50f5ccc74016204354ec9889726f73d803108682d32b8c8daed5625b58e34aa3.exe
-
Size
707KB
-
MD5
5f2c026cd9e8cdf35ddfc0c1572f3b90
-
SHA1
0a39744388dfa62294d6751abd31d182cd7ed989
-
SHA256
50f5ccc74016204354ec9889726f73d803108682d32b8c8daed5625b58e34aa3
-
SHA512
d98a76c8d6eeccffcf8c566cfd67b22cc2c1481e0d04c553dc2de286748a4e13f4de7a115457513155fd27da9bc462aa0200b55e2065f0a382c297c524049c0d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8evnh:6uaTmkZJ+naie5OTamgEoKxLWpAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
50f5ccc74016204354ec9889726f73d803108682d32b8c8daed5625b58e34aa3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections