General
-
Target
5622de414c8416bb264866da61f78e47afe625c89f22e92a143b179ebf7131f0.exe
-
Size
707KB
-
MD5
6a02c7935504647d165608ddea05b272
-
SHA1
d65c40f2b1f958c0e28e6366ef708106135eed06
-
SHA256
5622de414c8416bb264866da61f78e47afe625c89f22e92a143b179ebf7131f0
-
SHA512
618cbba9c654f1c8e1d62d23f3b5a7fe4db1cf12d200fdc074c26a5127d03158dd27bb427cd660123b509fd583bac9fd2e7366c0b760e96116ae02751c6290e6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8ovnh:6uaTmkZJ+naie5OTamgEoKxLWUWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5622de414c8416bb264866da61f78e47afe625c89f22e92a143b179ebf7131f0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections