General
-
Target
ca533d8af5eca681577264e3eeacec44c5013e26034cadf36c3cefc4bb3760ba.exe
-
Size
707KB
-
MD5
e962005295b26fa9ee1b756b7f0ac0a3
-
SHA1
9dad7607fb91ce662ac55d0e3fcabc2a4a609e11
-
SHA256
ca533d8af5eca681577264e3eeacec44c5013e26034cadf36c3cefc4bb3760ba
-
SHA512
b58fb4364499139647a3cdebb4460dd95fcf1704d6b2787c38ae3e034869e80ad21827ca1ca661897e77cdcc6958a4156505d5ceb3f67d1bc729fc8ee6dc1e80
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118vvnh:6uaTmkZJ+naie5OTamgEoKxLWYnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ca533d8af5eca681577264e3eeacec44c5013e26034cadf36c3cefc4bb3760ba.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections