General
-
Target
ba0e773167a49b05cb6dcea1a64d9c34dba3e0a558dfeb607c619d0034a67982.exe
-
Size
707KB
-
MD5
ae6b8f7bf28132447284f9e2b78278a5
-
SHA1
c26cc4c9f05ab7dc0073701c8eba5b7b873667b2
-
SHA256
ba0e773167a49b05cb6dcea1a64d9c34dba3e0a558dfeb607c619d0034a67982
-
SHA512
3f988594d422eeef5b2a00b637c894e8fc4b51ade5eaa7c74c42ed385f83536f156d2d1ca002d83697017f0ccf79725b3f4bda2332e1bc62fe71cfd3cbe76996
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Tvnh:6uaTmkZJ+naie5OTamgEoKxLWHTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ba0e773167a49b05cb6dcea1a64d9c34dba3e0a558dfeb607c619d0034a67982.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections