General
-
Target
a853df2a188b66983b541a924811807952544c9f5d5284c93e322c5077f0fc41.exe
-
Size
707KB
-
MD5
eb74b3ceb16c944e15778a36ba1f54a4
-
SHA1
22b729f1bef622c4d216a8ef316ecb099c12a0ba
-
SHA256
a853df2a188b66983b541a924811807952544c9f5d5284c93e322c5077f0fc41
-
SHA512
25dd7b9538038285be3f94cd134123ccaac528741a54dcb0a0d519758f1555fdbb1243f166229a19d5762b2459548a667113238cdb05d9836c554d8e9c5b4f1b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108/vnh:6uaTmkZJ+naie5OTamgEoKxLWvXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a853df2a188b66983b541a924811807952544c9f5d5284c93e322c5077f0fc41.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections