General
-
Target
a42b98ed37f59927005fa8a0a8db3185c5a7a936822ea2667899a6f6c287d178.exe
-
Size
707KB
-
MD5
3a464d7fac3e9632a46f414ef007605b
-
SHA1
681f871d681d6f9ca75a8088bb366f38b2d661e2
-
SHA256
a42b98ed37f59927005fa8a0a8db3185c5a7a936822ea2667899a6f6c287d178
-
SHA512
730755f9f993b5cf5eadcb38a7d77fb14b6e31552d948f642c349aaa0c42b2ba4a7d39181ec6cd88dfef7d98e9b867b9cd2b54d0f78e92356190418c9f57c711
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8dvnh:6uaTmkZJ+naie5OTamgEoKxLWKph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a42b98ed37f59927005fa8a0a8db3185c5a7a936822ea2667899a6f6c287d178.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections