General
-
Target
c45511224ece130611270cf7df43af93bef7a4a4c05c947130b8c93c452b6cfb.exe
-
Size
707KB
-
MD5
baacfb1900647a24df8ef2d51cb3af4a
-
SHA1
e174f2eb6edbfee1220406567ccb63cbfa753ae1
-
SHA256
c45511224ece130611270cf7df43af93bef7a4a4c05c947130b8c93c452b6cfb
-
SHA512
d406dff693a2a69fcada76ce410d445dcc83cb07ceecf558e8d14df32729a85c4c1a8c4c37bb61da4819e36825272624b815f7f48e715f899f61f5783deb2d36
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128Gtvnh:6uaTmkZJ+naie5OTamgEoKxLWlGZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c45511224ece130611270cf7df43af93bef7a4a4c05c947130b8c93c452b6cfb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections