General
-
Target
552896a130ab08b5d3d82535926deed38d1e9e0f87554c2690105ea8328e74bb.exe
-
Size
707KB
-
MD5
bf3a70f8553984fc6991682cd7328d62
-
SHA1
cd33f188841b9a650da47ce2aa1abbe6e6ed70d1
-
SHA256
552896a130ab08b5d3d82535926deed38d1e9e0f87554c2690105ea8328e74bb
-
SHA512
49b751547a1229ddb8e709f949ed5fef1c426e27a0e37f414d41ea48b8985a2652fc48ca7f55a845ded08b99b8597f16e483c7d5ee8854b29d808613bdef58fc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWXEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
552896a130ab08b5d3d82535926deed38d1e9e0f87554c2690105ea8328e74bb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections