General
-
Target
a47acc66d9fad7d40b7803a1e89d393b8933c51fa7a6057f12f763cc30ac21b8.exe
-
Size
707KB
-
MD5
506a16a76ae0e18be164c39a88197b8a
-
SHA1
e4437e60c62dc04abee78a1ebe135ebce28a4914
-
SHA256
a47acc66d9fad7d40b7803a1e89d393b8933c51fa7a6057f12f763cc30ac21b8
-
SHA512
7517c45f22f4f329fbbd081b76a8b47a47065bf41328e89fc512b571f55cb12bccdc535a1cf86405cf9668e4a087fa78ddc4ee905430d06c74f297fa0c0ae533
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8evnh:6uaTmkZJ+naie5OTamgEoKxLW0Ah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a47acc66d9fad7d40b7803a1e89d393b8933c51fa7a6057f12f763cc30ac21b8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections