General
-
Target
6516db4250300d84ed59657683e6dce75039c1aa44e512d86c1f804fc394cb0a.exe
-
Size
707KB
-
MD5
d1306ad5ec18f96d61ef0dccd755b115
-
SHA1
913647a8f58fc1e1e3d4216549e89a6d6ca262d0
-
SHA256
6516db4250300d84ed59657683e6dce75039c1aa44e512d86c1f804fc394cb0a
-
SHA512
c84164526333d0d6d7c9486f8a14891c687f4441e487277a2207453dafdbedb8866bf69cc0a75bef9ac9cd2b9d6a904ebfef8df81c69d164d72950c49b420e08
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1885vnh:6uaTmkZJ+naie5OTamgEoKxLWX9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6516db4250300d84ed59657683e6dce75039c1aa44e512d86c1f804fc394cb0a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections