General
-
Target
5b6122152c1b8f5fa4660cdb9dc599e8125b0a10cccc22831bd4eaaa3f055435.exe
-
Size
707KB
-
MD5
d4544e1fbb0d4f753dc09a7298080d5c
-
SHA1
4843f585657c1bdb418d748a855d775202049bda
-
SHA256
5b6122152c1b8f5fa4660cdb9dc599e8125b0a10cccc22831bd4eaaa3f055435
-
SHA512
b16dea112c656bbe50dc3202ccef71caf8daa13006aacd5a77c4ae6a8ce833918768e71e11345e7d0238eabd4c2b5a82fbf3b380c27aa1e7d303dae98150b1b2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1086vnh:6uaTmkZJ+naie5OTamgEoKxLWXUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5b6122152c1b8f5fa4660cdb9dc599e8125b0a10cccc22831bd4eaaa3f055435.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections