General
-
Target
52b466f553b6f0b4fee805d850b6926eb4fffae9ac22553ae08bcc248605262b.exe
-
Size
707KB
-
MD5
9c1c33b3b2d8dbb925c07c398df10b20
-
SHA1
a8f41fe11229c8000b6de2f45c6750e12528b405
-
SHA256
52b466f553b6f0b4fee805d850b6926eb4fffae9ac22553ae08bcc248605262b
-
SHA512
17f6b541196c1f8f9db6f5a3e4eefe81a994d0cb22807808287e2bfc095c8895e562c57f6c1dd41398e534587c8891e628f5533e98b9a95b4106979ac1f1625f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8Uvnh:6uaTmkZJ+naie5OTamgEoKxLWBqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
52b466f553b6f0b4fee805d850b6926eb4fffae9ac22553ae08bcc248605262b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections