General
-
Target
a91640f40d2ab9db2e646482456a60caae987ffbd331979978a5b614a601187a.exe
-
Size
707KB
-
MD5
4fa53d886b5edb6e53d263607481227b
-
SHA1
b09705b07afc80c208816c8bb9e6b4e9d0e29abf
-
SHA256
a91640f40d2ab9db2e646482456a60caae987ffbd331979978a5b614a601187a
-
SHA512
b9cfc7ba5cd7803e3690aebb95f16d382fa8f63ad465e80b4859224ac57508b039f120469b3e6ad43b17ba382ab2e4d879773475cdd9da06849a4f7d03b074a7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198Svnh:6uaTmkZJ+naie5OTamgEoKxLWw8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a91640f40d2ab9db2e646482456a60caae987ffbd331979978a5b614a601187a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections