General
-
Target
53de1f75e245d090b317567b1f15443683222282bc016e7e870a388fa7da0059.exe
-
Size
707KB
-
MD5
ad9ba68464a552012da03abf4b8a58d9
-
SHA1
1dd692aceece4e1db3f09d52f424bdb1d91e1e0f
-
SHA256
53de1f75e245d090b317567b1f15443683222282bc016e7e870a388fa7da0059
-
SHA512
6fb643ba312032843223707df450c40a38c8108ffdde7199d78563ce43b0945f52f250a78929efadfe6c6a9e34fe124e9dcca4c8ff65dc7a77196a85d047e21b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8Tvnh:6uaTmkZJ+naie5OTamgEoKxLW2Th
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
53de1f75e245d090b317567b1f15443683222282bc016e7e870a388fa7da0059.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections