General
-
Target
56bcb996518103625210554ffc656d5ec6ac24bb65874ce7a55c8bb9a716bf2e.exe
-
Size
707KB
-
MD5
ef482912df9d1ee28d628b909b1d37ce
-
SHA1
d4c31ae2a9d055b9f7d4a5a715e75cf9d4c0a85d
-
SHA256
56bcb996518103625210554ffc656d5ec6ac24bb65874ce7a55c8bb9a716bf2e
-
SHA512
08439b025ab6a89f456b257b408b1d8aba71663780c305c885964e8342426e3c723d2ff4de1a0ecb9d74bc5ba160994af55f4e024a88b0614445d573f908c230
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8ovnh:6uaTmkZJ+naie5OTamgEoKxLWfWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
56bcb996518103625210554ffc656d5ec6ac24bb65874ce7a55c8bb9a716bf2e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections