General
-
Target
a1ece51d1c71bdb77a44b13b9e620baf85c55c0e6ebfd1d04ca46e2f218123fe.exe
-
Size
707KB
-
MD5
bbbffd101e3eabb2852f283772eaa34a
-
SHA1
a2e686015b3459f8e0c920d6ce139fe14a3e4cbd
-
SHA256
a1ece51d1c71bdb77a44b13b9e620baf85c55c0e6ebfd1d04ca46e2f218123fe
-
SHA512
d255bbc865d6168add4036e1cecc5fca03a58612764fde3c0f14b44fb2b3897d1fbac0c822c7574ca135b8203118564217260c79028e0eb30ec75d8c1367701d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n/8kvnh:6uaTmkZJ+naie5OTamgEoKxLWpkah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a1ece51d1c71bdb77a44b13b9e620baf85c55c0e6ebfd1d04ca46e2f218123fe.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections