General
-
Target
c5fca148c830c25ada68791c864d781e380fdb129326b3dfbb7b10666a3ecb2b.exe
-
Size
707KB
-
MD5
122aa0889d960f7029a6c90675261875
-
SHA1
48f19dada69b856e4efef779484855e7a87927f8
-
SHA256
c5fca148c830c25ada68791c864d781e380fdb129326b3dfbb7b10666a3ecb2b
-
SHA512
c497198fe2b6f34e9072392ff6c83d20d36e38531d7500ab10367dc9db94e7dce7c5090dfd4ec07db104637f5e4ade5693f19fd818f9511c841a9bcd6cb46547
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8jvnh:6uaTmkZJ+naie5OTamgEoKxLWaDh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c5fca148c830c25ada68791c864d781e380fdb129326b3dfbb7b10666a3ecb2b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections