General

  • Target

    7aa45fe163a422f88955abee9444ae45f7ec1359f58d7c123650e382d326ae65.exe

  • Size

    707KB

  • MD5

    025aaea8980f69c00687c68289b03fcf

  • SHA1

    110a0d0212cecac3883404616f999548c0606000

  • SHA256

    7aa45fe163a422f88955abee9444ae45f7ec1359f58d7c123650e382d326ae65

  • SHA512

    4659ef0a9c21e3fd27caa0e682a008d784c742af823bb6fd43dac41d98f08bd94ad6f8783906b28bdbf703b2a762d026692f018bd503b2b4548bb76f4cfd1967

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Bvnh:6uaTmkZJ+naie5OTamgEoKxLWsVh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7aa45fe163a422f88955abee9444ae45f7ec1359f58d7c123650e382d326ae65.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections