General
-
Target
525902186311451158ef0e2183ec54fcc89ee97c93aa4e528f0b360a4f005ecc.exe
-
Size
707KB
-
MD5
cd2269696194e26f37a7155095c8930b
-
SHA1
5a5388644d8d9419867cc62344927438bb741700
-
SHA256
525902186311451158ef0e2183ec54fcc89ee97c93aa4e528f0b360a4f005ecc
-
SHA512
927d6e0c48ee91f7763a8d0321dc9b5560973f790484d0b7cd38c0a1860f8a1138c89325c2eddfd91096e1079482939f01ccf17ef5f55602b2512b3a51007658
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1883vnh:6uaTmkZJ+naie5OTamgEoKxLWHfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
525902186311451158ef0e2183ec54fcc89ee97c93aa4e528f0b360a4f005ecc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections