General
-
Target
c0b95e905cc2f8ba842ef1542c71649e41b34bdb8b2661c4d507303bfdb731ed.exe
-
Size
707KB
-
MD5
15e170c384462e8dd68e531132665063
-
SHA1
bd738c370c796775ca9e5216719e0e5454f1bc18
-
SHA256
c0b95e905cc2f8ba842ef1542c71649e41b34bdb8b2661c4d507303bfdb731ed
-
SHA512
0a97dc8b74f5d4c2c13bf03a94649712b5e594f15ae667ac3e2cf49d61b70b503fe029e59eb1bc0b271cf0ea670f49cfb6543be9a5407b5762664c5dd1e799e6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8svnh:6uaTmkZJ+naie5OTamgEoKxLWiyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c0b95e905cc2f8ba842ef1542c71649e41b34bdb8b2661c4d507303bfdb731ed.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections