General
-
Target
a387892605b9ce72592246fe40091ff2c41ecec40f7f2d6c8e243a87a6db3e94.exe
-
Size
707KB
-
MD5
bf503eec75d1d65fe174b6881c9e7e22
-
SHA1
b5ed1fee7b08fa036211784da3379dc314c75ea2
-
SHA256
a387892605b9ce72592246fe40091ff2c41ecec40f7f2d6c8e243a87a6db3e94
-
SHA512
90f23422841e400002a357a6750456e561e4192723cf3a813d8cea6ada155a70bcda5c01805cbca8fc7fd93e6da063a004f9fade21bb1324c7e5fc62484ac8fb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWZhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a387892605b9ce72592246fe40091ff2c41ecec40f7f2d6c8e243a87a6db3e94.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections