General
-
Target
a641e87d2de3d152ab91beebce6ad71c59a884f5b975fc6cf81e1e5461e3b500.exe
-
Size
707KB
-
MD5
f4281f760c16db1586e127a90c76dc46
-
SHA1
8bd0af2d4400f0b2bff902570c66a20f68aa1622
-
SHA256
a641e87d2de3d152ab91beebce6ad71c59a884f5b975fc6cf81e1e5461e3b500
-
SHA512
9247ba50ad106cca2412ace646c3317fa5a8b69530e2ab444efc6f62f00d8f437b5ba92cbbc1034dedb23d4434bd30d45b137ea5fd15994bd2548c6e0a06374c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r84vnh:6uaTmkZJ+naie5OTamgEoKxLW6Gh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a641e87d2de3d152ab91beebce6ad71c59a884f5b975fc6cf81e1e5461e3b500.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections