General
-
Target
54faf2cb09e96726f53cb11a2c5660cd3a6b6cbd47484ab61014862b1982c107.exe
-
Size
707KB
-
MD5
8094fa8bd927bb0ca8312bb18115e735
-
SHA1
3aa8c3ee2b06129aafc72436844baaff81aaa303
-
SHA256
54faf2cb09e96726f53cb11a2c5660cd3a6b6cbd47484ab61014862b1982c107
-
SHA512
6e8323fe8eb3e78d01d90c8fbafefa9cc7dd9864da396a0b898a205c9e177c58b7a737d360b150fa6c51f8710cf193a4a0ae2c315a1b42cb377345bdd4ad8115
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148Ovnh:6uaTmkZJ+naie5OTamgEoKxLW7Qh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
54faf2cb09e96726f53cb11a2c5660cd3a6b6cbd47484ab61014862b1982c107.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections