General
-
Target
896cd51419bc718d1412063bb8fc94738f00adf093810e008e566bc2300d0a3c.exe
-
Size
707KB
-
MD5
42350a7a7da49307d66f635b0024f2b5
-
SHA1
bf2b54207f9a995ff002d5d77813f638b524c887
-
SHA256
896cd51419bc718d1412063bb8fc94738f00adf093810e008e566bc2300d0a3c
-
SHA512
90533338b8d294333d0054712a1669c1827d1e8af698c2f3cbf2430132e3f5f31f9be6450ea1e8d190d75eb5555f55d81eb48daa88dc361dfafd93b2cabb6591
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWuRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
896cd51419bc718d1412063bb8fc94738f00adf093810e008e566bc2300d0a3c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections