General
-
Target
57445b2f3661153df1e9cd9be6a33cd1fb2151b8cd2f2abd5215b49900b30b86.exe
-
Size
707KB
-
MD5
25a2b31c1ec2ced2a73e89b121f47e6e
-
SHA1
990f93c8d88f78d0d69ba6844adad1d5a445a3f2
-
SHA256
57445b2f3661153df1e9cd9be6a33cd1fb2151b8cd2f2abd5215b49900b30b86
-
SHA512
6f4d8363a5405cdfa70a40708f252d29940e4bc58759736548eddcc01a5869547c31c78f7b430709d6d3feb74a08504a693ee74befb240fc02cecb248ef03e46
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Ivnh:6uaTmkZJ+naie5OTamgEoKxLW+2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
57445b2f3661153df1e9cd9be6a33cd1fb2151b8cd2f2abd5215b49900b30b86.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections