General
-
Target
a4885e38e55aa7178639b871f188826e1599d319371c4048e8b1f66d3873e7ee.exe
-
Size
707KB
-
MD5
fe520aca169a6fc74b24ed4333643178
-
SHA1
84c34efd63be1a5a6fc3c3d2327cc73c1203a49d
-
SHA256
a4885e38e55aa7178639b871f188826e1599d319371c4048e8b1f66d3873e7ee
-
SHA512
717edfa734e4a54b9c3ca8e76d9b6b37ed3d08123ed07feae8440ba5b90b21048c0ac91e38c29c68086603438a430794dcd5bfde83386353ff6afd420152013c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G87vnh:6uaTmkZJ+naie5OTamgEoKxLWVrh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a4885e38e55aa7178639b871f188826e1599d319371c4048e8b1f66d3873e7ee.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections