General
-
Target
a5d2ea4bc222288162e5757004119d5980d2e21faa9b888540c075b9eb909b30.exe
-
Size
707KB
-
MD5
65931ef4e94be9e44e5144ef41f4df13
-
SHA1
efca2ccdfe105f19c5fd56d259d478ee47003bbe
-
SHA256
a5d2ea4bc222288162e5757004119d5980d2e21faa9b888540c075b9eb909b30
-
SHA512
860cbf182e4aa9a9cd50824330527eb37d1d7259125c8b3cf3426e65afaf6f782397adf5fc0572904d512265aa61e0a3dd2329bf0034d79b02e7fb377db3b6ba
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1V8yvnh:6uaTmkZJ+naie5OTamgEoKxLWoch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a5d2ea4bc222288162e5757004119d5980d2e21faa9b888540c075b9eb909b30.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections