General
-
Target
551df6d831e9ed87e7fa55f1229369aa894a44f830dde7ee402a80c326d99a7b.exe
-
Size
707KB
-
MD5
0523639057b37d0dd317ac6fc937319c
-
SHA1
db559e67e6c20531a54d9fcde73792f23dec4ca9
-
SHA256
551df6d831e9ed87e7fa55f1229369aa894a44f830dde7ee402a80c326d99a7b
-
SHA512
adfe6cdcd6dc88e312e976dab06137ae5b34505f8098accdfde041f520c0a8e8fd9423ed1b340e54a7700ccad582fc1965a309e909bd45c4ab554429956fb9a2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Qvnh:6uaTmkZJ+naie5OTamgEoKxLWOOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
551df6d831e9ed87e7fa55f1229369aa894a44f830dde7ee402a80c326d99a7b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections