General
-
Target
528813337ed200133c74eb130327568b5fcaafa590dc21fcb3a6fa4df4980927.exe
-
Size
707KB
-
MD5
b82502d9c26b0215cb455de1a5b41b6a
-
SHA1
d8d9904b79996153bd1e80feb96ec8cbb825722e
-
SHA256
528813337ed200133c74eb130327568b5fcaafa590dc21fcb3a6fa4df4980927
-
SHA512
392a07facb25b2ff910d9dd6507c6064264eca64165e1d1a21eb5d388929ebc10de2e0268159e434feb3722a447f94bddccc1c67e1b658de5b4cc88329966f9f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Qvnh:6uaTmkZJ+naie5OTamgEoKxLWKOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
528813337ed200133c74eb130327568b5fcaafa590dc21fcb3a6fa4df4980927.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections