General
-
Target
5d43684501ede632a89cfde8bfbde1709876fd430abe4c5f9ff7fd5cc775dc4d.exe
-
Size
707KB
-
MD5
db4d561516bfa1eda5607ebfd8c78ae0
-
SHA1
6cb199298f42b4cce472828b6c8c749778783fe1
-
SHA256
5d43684501ede632a89cfde8bfbde1709876fd430abe4c5f9ff7fd5cc775dc4d
-
SHA512
8d35f037969318f7f5b66cb88859ca9e0addd265d452cb1256b6e3923557fc0c6dbcaa38b0457b4937a52c75155aaa60129ae4e1a98c8f18118b4eb7ce55818a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T89vnh:6uaTmkZJ+naie5OTamgEoKxLWyJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5d43684501ede632a89cfde8bfbde1709876fd430abe4c5f9ff7fd5cc775dc4d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections