General
-
Target
5c92d1b46c3e2f7fdcd3089627002135a946cc9ca88c4c0fae5639fd4a75acf0.exe
-
Size
707KB
-
MD5
01e0bbd128d6c75c4ccc024bc8828087
-
SHA1
65ad6907c9b6a2599e7cc8f906522b6c06170ac4
-
SHA256
5c92d1b46c3e2f7fdcd3089627002135a946cc9ca88c4c0fae5639fd4a75acf0
-
SHA512
d6ff8fd9b845dead2ba1dc4892efecb5dda710fb1e945507b8cad29be4bf7117a4ecb657c1c4fa4a154857c9b84647b9e5d73836c2141a222b0c4abd1f7eee7e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S8Rvnh:6uaTmkZJ+naie5OTamgEoKxLWpFh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5c92d1b46c3e2f7fdcd3089627002135a946cc9ca88c4c0fae5639fd4a75acf0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections