General
-
Target
a85d39b92650e5ec905503bae44a5c5b5cc17e032202958a53ce927c24097de5.exe
-
Size
707KB
-
MD5
2c579744bcf1223f900098a2799e7955
-
SHA1
442a6b988a6867e084e04fc7c09545f52dd59fe9
-
SHA256
a85d39b92650e5ec905503bae44a5c5b5cc17e032202958a53ce927c24097de5
-
SHA512
a2c1038501ffba9698eb530cec71752d2d6c6eca029e17819d5db6e7ba0c0222400922c10f82679bd7f20b43584b32fc9240062f9148eeb5200a674390ae14e2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWhoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a85d39b92650e5ec905503bae44a5c5b5cc17e032202958a53ce927c24097de5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections