General
-
Target
56bf99b0dcc01e7f54ea914e9dc0b04e75d12edb4d620ebddf6ec206ed7a43bd.exe
-
Size
707KB
-
MD5
5b656eb3410f4e457f22f67ba2527239
-
SHA1
3dc548342a013f0cadd0cca0a04caff0f7e7b2a2
-
SHA256
56bf99b0dcc01e7f54ea914e9dc0b04e75d12edb4d620ebddf6ec206ed7a43bd
-
SHA512
6ae5a6f241c225c0fb861fcf6e9c7be1fe759a8daebadcd5f2c5069e251b726ca4b0e2751e6de466f6cd37729073e46fb11f99184093ba00cbea8713851922b5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8kvnh:6uaTmkZJ+naie5OTamgEoKxLW2ah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
56bf99b0dcc01e7f54ea914e9dc0b04e75d12edb4d620ebddf6ec206ed7a43bd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections