General
-
Target
5e2296ebf45861ca92ed55fb6ee6f4da4ee3d6738c9c9fe5faabbf939f00e734.exe
-
Size
707KB
-
MD5
309aaf289137ee60210f7dc7827edace
-
SHA1
71823d899e59a8cf22f98f526e8b87e5813e9a28
-
SHA256
5e2296ebf45861ca92ed55fb6ee6f4da4ee3d6738c9c9fe5faabbf939f00e734
-
SHA512
b3deaf2a654eb3b5c9ae5eefc2178369ca8c1a28d3dc708eb21a5f1bf391dc2def0fdc9342793535b2529a59374e45c2f1cb86d3f79642b39f5941e6b7811506
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8gvnh:6uaTmkZJ+naie5OTamgEoKxLWj+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5e2296ebf45861ca92ed55fb6ee6f4da4ee3d6738c9c9fe5faabbf939f00e734.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections