General
-
Target
a275c134daabb61c692f464724baa6700dada76f6be2113096b84e5c6ca9caf0.exe
-
Size
707KB
-
MD5
e1656f9206a082b97163d53e47b7c809
-
SHA1
f71aab57439b910d2f435f75b2cb13bf0d13705e
-
SHA256
a275c134daabb61c692f464724baa6700dada76f6be2113096b84e5c6ca9caf0
-
SHA512
9d0754f83ee6142fbde476d069fff0f7bdb31ff4ee55d90fa02557d9dd3c5e1331c00878329437cfd21873b59927da2aa61477c8068d8d1ee79abb3b24692a9f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8Svnh:6uaTmkZJ+naie5OTamgEoKxLW+8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a275c134daabb61c692f464724baa6700dada76f6be2113096b84e5c6ca9caf0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections