General
-
Target
82130e79772665555e473d78de7a776bef7195c305843868c43d3ee603521aed.exe
-
Size
707KB
-
MD5
3887b1018337f8667e71d753e5338be2
-
SHA1
77a74c70e3af826957817c2eb1386ff6ae1c6538
-
SHA256
82130e79772665555e473d78de7a776bef7195c305843868c43d3ee603521aed
-
SHA512
34a276b7fe78e45a3fe2ca9c334d4621a2f868cecae32c49f8d1fcc47ba21f64c82096c57921867e78174488c13e3839881398d557f7bc2fe2cb835281977070
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1u8fvnh:6uaTmkZJ+naie5OTamgEoKxLWV3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
82130e79772665555e473d78de7a776bef7195c305843868c43d3ee603521aed.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections