General
-
Target
557f471ffa04ded255ead988e02c930b7ed1f5caa8c68276acbd144760c49a01.exe
-
Size
707KB
-
MD5
b5c46d0af65bef2bb6d1389623bb21fa
-
SHA1
e388f5f2caeab4ab7570cb0e39ecd44127d55561
-
SHA256
557f471ffa04ded255ead988e02c930b7ed1f5caa8c68276acbd144760c49a01
-
SHA512
da784ab96b4de2ced37793cc2fda02401fcf806eb171668df24d412c33ba3072fd0f054d2f7510a20bd4807779627d222ecc8fcbe2d44f3e98e9feaaba1769c5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8tvnh:6uaTmkZJ+naie5OTamgEoKxLWMZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
557f471ffa04ded255ead988e02c930b7ed1f5caa8c68276acbd144760c49a01.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections