General
-
Target
a1b82ee96e7e52836042700b82f4648a27ad7c7c3a7c5614bc6cdec9103b17e2.exe
-
Size
707KB
-
MD5
32b988ce7b41b69665daf8e170c2f1aa
-
SHA1
9def1f95f154f11bb03d31448856b52697f61b58
-
SHA256
a1b82ee96e7e52836042700b82f4648a27ad7c7c3a7c5614bc6cdec9103b17e2
-
SHA512
86168557f1d1dd207f9935886e9fb92737c5cfa565004721a588380bf63e83c9303387fe7c4c1c6f3a9d114d63026530e0c569c9bd941b31d7a56f65bdcc6a18
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Tvnh:6uaTmkZJ+naie5OTamgEoKxLWHTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a1b82ee96e7e52836042700b82f4648a27ad7c7c3a7c5614bc6cdec9103b17e2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections