General
-
Target
6228b9b2cb95dd9cadc2acaf9eb0e01768c4b57fa4314da75765e4992029e51f.exe
-
Size
707KB
-
MD5
54ab5fd03f2318ef982da337109b6d34
-
SHA1
9252b5fc8175abfb076286c02fa2a93d6a9161ef
-
SHA256
6228b9b2cb95dd9cadc2acaf9eb0e01768c4b57fa4314da75765e4992029e51f
-
SHA512
561195eb385afdc7d1b527c4b579378f93cb04dd9022db02b4b0d2de56f44e9edc876f8df50f92b49fbd221801b3f7c4dbc7109a833b6d89b05eed1ad7e29b8b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138yvnh:6uaTmkZJ+naie5OTamgEoKxLWmch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6228b9b2cb95dd9cadc2acaf9eb0e01768c4b57fa4314da75765e4992029e51f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections