General
-
Target
531fca96770a9ed08530ac6549ae0a83b7bcbabaebbd29ef5ed13693117c344a.exe
-
Size
707KB
-
MD5
c21b33179b4ad6412c6cfbc8fb8602a8
-
SHA1
3c7c7ebad8b8c0b1cb68065b9c87f2f663b6c999
-
SHA256
531fca96770a9ed08530ac6549ae0a83b7bcbabaebbd29ef5ed13693117c344a
-
SHA512
52872e38cc9c77b5527b2069649a12303ac23426394726b1c3ad05e2cbbcad85aa8f2f5c4cc768e43978edbccd06a02c38e8bebcc5f8cc4c9dd145b6dec43b07
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1080vnh:6uaTmkZJ+naie5OTamgEoKxLWXKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
531fca96770a9ed08530ac6549ae0a83b7bcbabaebbd29ef5ed13693117c344a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections