General
-
Target
81d3a4ed7a56ec2d279dc0ed500c4312cef8ccb1bd9647bbe8b4681e1b3492e5.exe
-
Size
707KB
-
MD5
3aabbdb2dd829139d964777319c58a44
-
SHA1
124b5979b67c1b9a074fd8a82296b7ecc65430ba
-
SHA256
81d3a4ed7a56ec2d279dc0ed500c4312cef8ccb1bd9647bbe8b4681e1b3492e5
-
SHA512
af1784a07fa611594f6004343188487f0a8035f82943d2fe6a6a029934dd695d8a51cc4a5ad0ab161fd1b86eecfe4275e4a1b039a30a1f7f38a527aab986516d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x8cvnh:6uaTmkZJ+naie5OTamgEoKxLWcCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
81d3a4ed7a56ec2d279dc0ed500c4312cef8ccb1bd9647bbe8b4681e1b3492e5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections