General
-
Target
6d4ea148949d32646a50dfa20041a2c9b12bbc97af28f52a93b410018bd2b523.exe
-
Size
707KB
-
MD5
485fb749f3574d154ec8159494389944
-
SHA1
549bd166ddeba92309d90f81f4a6ca1be7711bdb
-
SHA256
6d4ea148949d32646a50dfa20041a2c9b12bbc97af28f52a93b410018bd2b523
-
SHA512
4bb2af903b86f3591caa9313a640444cf6499f7c367297f44a3781f75e2a3de8a795a55c9b75ff0b3ae88ef234eb00147ba78debe8325af72af1ace8f5a30c98
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8zvnh:6uaTmkZJ+naie5OTamgEoKxLWVzh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6d4ea148949d32646a50dfa20041a2c9b12bbc97af28f52a93b410018bd2b523.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections