General
-
Target
c475246eda16d4813b9558f4d6d32388a8e5d6b27dc3d53020a18654b5467edd.exe
-
Size
707KB
-
MD5
0610f09b43a7ad7d7a89481384ce7c4a
-
SHA1
3c8d349abd88170a9fd3ca720e27186c5d1c4ecc
-
SHA256
c475246eda16d4813b9558f4d6d32388a8e5d6b27dc3d53020a18654b5467edd
-
SHA512
4ae9eed164f9726f53ef5a8c0b0dabf3705d2dfe1c3f5563b41373744eb313e2f9756698ebe26dfd74e32e2579ca948f6520069ea39f7de3a44e4050f05f2f28
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8wvnh:6uaTmkZJ+naie5OTamgEoKxLWUuh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c475246eda16d4813b9558f4d6d32388a8e5d6b27dc3d53020a18654b5467edd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections