General
-
Target
cc5c52e8613d43808b5d6318bec728f51e00fe9ae28568fa8ba297503ebad268.exe
-
Size
707KB
-
MD5
35c76df289fbff8baff52450a6ad0dee
-
SHA1
51c3b70a90b006227e877d250143faf75e6102f6
-
SHA256
cc5c52e8613d43808b5d6318bec728f51e00fe9ae28568fa8ba297503ebad268
-
SHA512
0efd07d028c6af259c9a5ed260fdd0dd773743a40815ee19d740512e5e65afc284a93c022136d8b1d2bff9928f956345037e3624017a52db0f13d64579b0e94d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1S89vnh:6uaTmkZJ+naie5OTamgEoKxLWxJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cc5c52e8613d43808b5d6318bec728f51e00fe9ae28568fa8ba297503ebad268.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections