General
-
Target
511692641426636447046c1c942b2bcbffe7c0a56ce782452962b984bb809062.exe
-
Size
707KB
-
MD5
5164f5a49718d60ab6c4f3b878ca029f
-
SHA1
fe19cbffdc377b6523f740bc2599b10f3b857325
-
SHA256
511692641426636447046c1c942b2bcbffe7c0a56ce782452962b984bb809062
-
SHA512
bc45094cd6aeacd8fd4f8f0d59e006ffe503d025b350b9f3a96ccb4142972106ec2e01c0b7ace99bfb1cf51330fc9ce7473941bf6e304ab70c9b52236a4debab
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Jvnh:6uaTmkZJ+naie5OTamgEoKxLW0th
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
511692641426636447046c1c942b2bcbffe7c0a56ce782452962b984bb809062.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections