General
-
Target
52a1a0b464f8b1f72f8b4dcd6ebdf14d520f9af509a9a93c738caae4fd260451.exe
-
Size
707KB
-
MD5
3c101afdc8ac66b1919359153230c2b0
-
SHA1
b51090c8ea94cb7304514844b008ac6194e63efe
-
SHA256
52a1a0b464f8b1f72f8b4dcd6ebdf14d520f9af509a9a93c738caae4fd260451
-
SHA512
0e5a343f078e91fd7b3ebf9b6b08a1640a1d271b878640e89c4d02243b4ba86bba8c52498a69b8ecd5649515f98bc7f42d87e6cfe174c8862833cc27bedfa865
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWdhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
52a1a0b464f8b1f72f8b4dcd6ebdf14d520f9af509a9a93c738caae4fd260451.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections