General
-
Target
5ca344e850b45ea8cd6f112ebdaf9b829b6e06b07fe8bcfce0a359b0323ed327.exe
-
Size
707KB
-
MD5
2e66f2cd99a3224016969d5b44e5d363
-
SHA1
d6a3363821d213374956ac3746ef108bda17fde8
-
SHA256
5ca344e850b45ea8cd6f112ebdaf9b829b6e06b07fe8bcfce0a359b0323ed327
-
SHA512
9adc03d3a0281081f9bc090340cfbcfd0ae0da267f177dfa9d5fbaf7b01593c0afaca915c46f04c52a7945876b783b77e8ce7df0f170e9fecb3c833dc8a14476
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8dvnh:6uaTmkZJ+naie5OTamgEoKxLWtph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5ca344e850b45ea8cd6f112ebdaf9b829b6e06b07fe8bcfce0a359b0323ed327.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections