General
-
Target
a45cebb05b221e05c88f56f1caebd3fd606acf63372e3dbf78f393b820a36d16.exe
-
Size
707KB
-
MD5
f0cdde5d3dbd39b15970de7d8b65c4d3
-
SHA1
ee7fe92c7d68b3f43f64a78cd220ca270ef2d89c
-
SHA256
a45cebb05b221e05c88f56f1caebd3fd606acf63372e3dbf78f393b820a36d16
-
SHA512
27978d5e010f36f1612de868ed53c4fc063aa6407b0eae2cec41569a3f219492fbe52e0d011fe6f04f95c3b1d50a2de6ac35a753d3d0a4939d7d5845fb824ccb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8avnh:6uaTmkZJ+naie5OTamgEoKxLW10h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a45cebb05b221e05c88f56f1caebd3fd606acf63372e3dbf78f393b820a36d16.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections