General
-
Target
c560561f9fa9d4c4a93d39e500f8d6695de38da3ae6bad90837dae404bda650a.exe
-
Size
707KB
-
MD5
8b1fbef584048a068b47081a8c998266
-
SHA1
c710b5f7f6f22bd4ca91dd40b351c19de9ff08ce
-
SHA256
c560561f9fa9d4c4a93d39e500f8d6695de38da3ae6bad90837dae404bda650a
-
SHA512
427bc13bb6677c4d71958ff6c5d0fe6b8e5829462dbd4f28222b07f3bb3b4f4f4e04e45342f061dd15e4342f69379726e10705264531d8d9aa7addd0dc1531ef
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8rvnh:6uaTmkZJ+naie5OTamgEoKxLWz7h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c560561f9fa9d4c4a93d39e500f8d6695de38da3ae6bad90837dae404bda650a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections