General
-
Target
95afb668550de19559e112a1b4b789f83a15ebbdea6b482b762b1208a6c1cb22.exe
-
Size
707KB
-
MD5
fa26a421639fa5dafd855d7f4f3b7f6c
-
SHA1
be6619818d5b7e3383ce5a48932a6b6d80da91d2
-
SHA256
95afb668550de19559e112a1b4b789f83a15ebbdea6b482b762b1208a6c1cb22
-
SHA512
e729467d0b8167b6c1b2a5998e1de5fda99b5a8756744f658c4130ee06e1c9c268f779c672af829efa7b4ae4e7aff406d342706638c1f8b786f3fa604687d5be
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1a8Ivnh:6uaTmkZJ+naie5OTamgEoKxLWJ2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
95afb668550de19559e112a1b4b789f83a15ebbdea6b482b762b1208a6c1cb22.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections