General
-
Target
51153c400f3576e1d5d25cfb537e50a76d2005188b10e42bb199a0a254647776.exe
-
Size
707KB
-
MD5
c93ccdb6c525fd999bbe3c02185bdd41
-
SHA1
c6f119fee85e2aafe1fa330feedda22ef272395c
-
SHA256
51153c400f3576e1d5d25cfb537e50a76d2005188b10e42bb199a0a254647776
-
SHA512
9501dd2f23a4b5444d10cc34d14b5a0ce585ac758c412b16e30150e1245834e9eace48913668cb01e8cd4966de37acda947f020c3a4c7d08a4c0b880d727e6ac
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8wvnh:6uaTmkZJ+naie5OTamgEoKxLWZuh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
51153c400f3576e1d5d25cfb537e50a76d2005188b10e42bb199a0a254647776.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections