General
-
Target
ca4a2dfce65e3b11e9bc700fa1a845db0b2b110b7f0bdd5ce50493999c768020.exe
-
Size
707KB
-
MD5
8cab747cac309bb130bd3ee160d6c9dc
-
SHA1
a5d0f02541053d8374003ff55d8a7e23c8c967f1
-
SHA256
ca4a2dfce65e3b11e9bc700fa1a845db0b2b110b7f0bdd5ce50493999c768020
-
SHA512
5700a22084c7a59e9c1e9ad086b418eeeccae6b5326c86b8cdf56314abf04e0a3cd6407a176e41ff3c7d2526f8b3f49d2ab3591bff45259d942450508c3f3fd1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148vvnh:6uaTmkZJ+naie5OTamgEoKxLWLnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ca4a2dfce65e3b11e9bc700fa1a845db0b2b110b7f0bdd5ce50493999c768020.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections