General
-
Target
5a1224c38718901cd2abc8418be4f357694c90d249b5e7d858c55f7abc935ecd.exe
-
Size
707KB
-
MD5
e9b1c6b5238911e44edb2dbfe29d38fc
-
SHA1
b80c13e8fa0032f313cd3c6a7592741a6a9d218e
-
SHA256
5a1224c38718901cd2abc8418be4f357694c90d249b5e7d858c55f7abc935ecd
-
SHA512
42b81d6ff11e81b73f951b93ad2dec81671fd89b30a74b6792c1f5398da1d04214971870096feccebb7dac20c6788a7a0b9c2d1807caf6ec347038990d3e4934
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Rvnh:6uaTmkZJ+naie5OTamgEoKxLWtFh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5a1224c38718901cd2abc8418be4f357694c90d249b5e7d858c55f7abc935ecd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections