General
-
Target
a075aa78060b94189c6a8a4c7da5c781acd8b649f57bf14933352030d040d196.exe
-
Size
707KB
-
MD5
eccf2328369c0c6f858375b80081c776
-
SHA1
47f21eb0e04d484b53509673934a5ecdecddae2f
-
SHA256
a075aa78060b94189c6a8a4c7da5c781acd8b649f57bf14933352030d040d196
-
SHA512
75fb115c1027cf0622910480af8814219316755fc403641201f5fdf6c0e2a43b4073fe5bc88b782f34eadebc46ebcf471441f6bb244dd84f1a4f446f0cd0cd27
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8Tvnh:6uaTmkZJ+naie5OTamgEoKxLWJTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a075aa78060b94189c6a8a4c7da5c781acd8b649f57bf14933352030d040d196.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections