General
-
Target
526decd28c2576cc6ad1a4b49b031ee73e04873c09ab501be0848b98035944a7.exe
-
Size
707KB
-
MD5
ee37bb2922b0272a9c805ae4baf40079
-
SHA1
e56cf25144bd00247d870eb099afd0471c6ffebe
-
SHA256
526decd28c2576cc6ad1a4b49b031ee73e04873c09ab501be0848b98035944a7
-
SHA512
6f8e2df286b0bb3a0b713ccd6ec646a3eff8f3bdf20f12aee71fc9c3372eaa8bed682b7bed8c3ca67efeb0c3dcd7d0740c3b1e33f36f9dea99668574cebd3d92
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L88vnh:6uaTmkZJ+naie5OTamgEoKxLWyih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
526decd28c2576cc6ad1a4b49b031ee73e04873c09ab501be0848b98035944a7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections