General
-
Target
54fca06fd3c0723c00dbfd3a57014b5198bd5fd42cd382ac2d835a7c45282708.exe
-
Size
707KB
-
MD5
d2b80d1c6ed4457e5df52197357365d4
-
SHA1
9c3ccb973e4a5dd7279c7f309b1929d4ad2cc62a
-
SHA256
54fca06fd3c0723c00dbfd3a57014b5198bd5fd42cd382ac2d835a7c45282708
-
SHA512
e55ba46ca10c0ba55d297cda0f860f8d3209660d07ff1b29ce3a63646d2a2a490072561f3be6c55ef05c01f2edc4a3c231d8461d5ac7e89809364cd92cc346cc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Gvnh:6uaTmkZJ+naie5OTamgEoKxLWq4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
54fca06fd3c0723c00dbfd3a57014b5198bd5fd42cd382ac2d835a7c45282708.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections