General
-
Target
ba0a1e167943ef1afe2875b2e430fdd66a13747e4591959c10b081816d981ec8.exe
-
Size
707KB
-
MD5
7e654b8e04d89d834d61de3351a7b286
-
SHA1
51eebea9b5f8a24055af78e6ec4402dca916ad62
-
SHA256
ba0a1e167943ef1afe2875b2e430fdd66a13747e4591959c10b081816d981ec8
-
SHA512
7c2f8218685b0189a02602ae8013d284335cf6b3f32fdb8e7a6b7809fd156e9aad1d2729835b58a8898e4989b1fa7009cd57d9ae62b5bdd68d18e5766ddb1f27
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWIhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ba0a1e167943ef1afe2875b2e430fdd66a13747e4591959c10b081816d981ec8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections