General
-
Target
5a600d2544902dbb9ab920d127d044ee17f9ecec791d0acc0c1057506a213792.exe
-
Size
707KB
-
MD5
cee7fe6d6aec2d24bef1b21434aefb99
-
SHA1
9da9212e3ccc058497b6660923724dc58e7852e8
-
SHA256
5a600d2544902dbb9ab920d127d044ee17f9ecec791d0acc0c1057506a213792
-
SHA512
08b800b16654e2893a44c3e6197a269ddac80d26e29fd74004f90b6e1e6f5c140a61956de206a978adc4ccaa93c8357eea727c1979843a2d9302b687a80b3430
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1a8lvnh:6uaTmkZJ+naie5OTamgEoKxLWJBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5a600d2544902dbb9ab920d127d044ee17f9ecec791d0acc0c1057506a213792.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections