General
-
Target
51a74ca42292aa0b5b2509349a1588aed58360d9eed6bb3c0db050f8b909ce06.exe
-
Size
707KB
-
MD5
3b87d73e8586a3a3a98e5580df7527b4
-
SHA1
f7a6de3dbb4a35b883204978bb60a54482636829
-
SHA256
51a74ca42292aa0b5b2509349a1588aed58360d9eed6bb3c0db050f8b909ce06
-
SHA512
43a3e1b8e077db487bb8ae6f7354012de02e33f902a52d74bb1024f55db5c0ce0e7420b0092ad6f5a910e70397d815ade0199264ccb5eafd2c92b25a348afac6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8Mvnh:6uaTmkZJ+naie5OTamgEoKxLW6Sh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
51a74ca42292aa0b5b2509349a1588aed58360d9eed6bb3c0db050f8b909ce06.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections