General
-
Target
695002596b1e188196290687417e45041c25931631218154a14ca698117caa55.exe
-
Size
707KB
-
MD5
54bdf3a9cea8d4586a068781a7d0b2aa
-
SHA1
047c0d1998ecebd288577c4111e52072b01c88b8
-
SHA256
695002596b1e188196290687417e45041c25931631218154a14ca698117caa55
-
SHA512
f25bb100b1a75257bacc43747e7a3eaf5c0801704a1aa85756cf8fd6919adfca926f9dcd21cdb08cbdd987d5a13f42278cd32d6807d2ef3abbfe56be4fcc0198
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1l8evnh:6uaTmkZJ+naie5OTamgEoKxLWYAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
695002596b1e188196290687417e45041c25931631218154a14ca698117caa55.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections