General
-
Target
6550312545478d27a980736e9db2345450d9c85ec5305ba8d538671abd13cff7.exe
-
Size
707KB
-
MD5
f940fd9122b0a68dd318ed6eb9459399
-
SHA1
400e4d337f132c232c2f9c838fa92ab34cdd5f8f
-
SHA256
6550312545478d27a980736e9db2345450d9c85ec5305ba8d538671abd13cff7
-
SHA512
e94c1f2a2bb60f74678710c5d565fd7a5974ed9ef6e59832c897a2d4838ef338145e25b7b295de92ae8684c8f2680cc040e11af0552f4c08356ee7a9981694ca
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o83vnh:6uaTmkZJ+naie5OTamgEoKxLWLfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6550312545478d27a980736e9db2345450d9c85ec5305ba8d538671abd13cff7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections