General
-
Target
59a9fd5e06cf5496bf2e01c06d512c939c765ebd14abec15eddbba5cec4a2ff4.exe
-
Size
707KB
-
MD5
096bae42ce9dbeb327a93085733e4374
-
SHA1
d14e4f52b321d2469769b7b38cf35a8c491b856e
-
SHA256
59a9fd5e06cf5496bf2e01c06d512c939c765ebd14abec15eddbba5cec4a2ff4
-
SHA512
39a76a8b11a545e56ba3786dd997a36861f95879cf1de19b65177a122f6c63c264e67283dd6adb821ee09c229a06d528b0fcc2be0b11962900af26ca0d9759a1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8Tvnh:6uaTmkZJ+naie5OTamgEoKxLW2Th
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
59a9fd5e06cf5496bf2e01c06d512c939c765ebd14abec15eddbba5cec4a2ff4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections