General
-
Target
a312955f4344d7a961596e9c725ac12b125a6ee9ad849d7c2f5c96b3179849ab.exe
-
Size
707KB
-
MD5
2d1f3332f45d26f513426182b90bf1cc
-
SHA1
496bc0688f15a585d17740d8c731857103d9f292
-
SHA256
a312955f4344d7a961596e9c725ac12b125a6ee9ad849d7c2f5c96b3179849ab
-
SHA512
4b8251dc820f7fd91c72c89786ec96d1327d5cc3a39da171c7e82d36edf02f1d280011bf7e61d17c06df1453aec38c91a884d1d928737a0a04b814d642b1cb97
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c85vnh:6uaTmkZJ+naie5OTamgEoKxLWv9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a312955f4344d7a961596e9c725ac12b125a6ee9ad849d7c2f5c96b3179849ab.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections