General
-
Target
81973ddb556a924e0d34c611cd69053eb0ceadc9d0c9688d1959eed3505bfe16.exe
-
Size
707KB
-
MD5
05b08a1851244fc68478d08121a490ad
-
SHA1
00d5e9278d496457a484e9ae4443ca8f249df2a9
-
SHA256
81973ddb556a924e0d34c611cd69053eb0ceadc9d0c9688d1959eed3505bfe16
-
SHA512
d512493f1c9c4ce9dddbf15cf4db7b553dfaa3280e31487340da52ac0e5b7885365e80faf3c249b443d56230a535faa117397e672f2d575431e1ba0062877e77
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Gvnh:6uaTmkZJ+naie5OTamgEoKxLW+4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
81973ddb556a924e0d34c611cd69053eb0ceadc9d0c9688d1959eed3505bfe16.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections