General
-
Target
513b600b3afdfd4127c12a98e050ad181b78f81c0a8ae08641c42d8ba7f2c8b4.exe
-
Size
707KB
-
MD5
619d9e863ed0bf4bbbe08e733c606de1
-
SHA1
cb10cac93ae9f239c09d9ec612f70e434e1dd4e5
-
SHA256
513b600b3afdfd4127c12a98e050ad181b78f81c0a8ae08641c42d8ba7f2c8b4
-
SHA512
b1721091c3d7f709e8720a416bbb2e14748a29c64f5233cab014132c0f6844e825e9c8ce8059c28fce1ea6c0ea87eb78859cf3a3d1f2bbf984ab5a9ce167c434
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y81vnh:6uaTmkZJ+naie5OTamgEoKxLWRxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
513b600b3afdfd4127c12a98e050ad181b78f81c0a8ae08641c42d8ba7f2c8b4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections