Overview

overview

10

Static

static

10

5df9672405...72.exe

windows7-x64

10

5df9672405...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5df96724058d150ed351145cf808f715b2363cec48a1428db70b9ebfe901ee72.exe

  • Size

    707KB

  • MD5

    cff4320476babd21fa9f533e8fdff386

  • SHA1

    218fc475198e82abe0cdf0e9f0c642d92b8d6a16

  • SHA256

    5df96724058d150ed351145cf808f715b2363cec48a1428db70b9ebfe901ee72

  • SHA512

    c88d172ec79a046716f42b0b8fbbace0d21a2456b2bb6048610ba20d0e76b14e6fdb1bc5c424be5793aa152a9cbe909449e10c5847c8dd300412724191e1b99a

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q84vnh:6uaTmkZJ+naie5OTamgEoKxLWTGh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5df96724058d150ed351145cf808f715b2363cec48a1428db70b9ebfe901ee72.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections