General
-
Target
a1ba459c72d5544352e57fbad0291aebc6c3d2255f50998d13bd22a9674ffa37.exe
-
Size
707KB
-
MD5
b4ed1904bb5d319133f92e9fdd257257
-
SHA1
135c356b15ed8163b05fb074295f8d1f459bf550
-
SHA256
a1ba459c72d5544352e57fbad0291aebc6c3d2255f50998d13bd22a9674ffa37
-
SHA512
9f0df1fabeae0edad80843103a7ae5321f59acf260aa8ee1bc365e78d4d16bd75f47a72eb0b65100609a48decbc3f0bb63a1598dcc03f9306553eaa77c192357
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Mvnh:6uaTmkZJ+naie5OTamgEoKxLW2Sh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a1ba459c72d5544352e57fbad0291aebc6c3d2255f50998d13bd22a9674ffa37.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections