General
-
Target
a95bfa5ecd840375e0c78656198ecdd0619c4885429eaf355a37babfdece788f.exe
-
Size
707KB
-
MD5
0eb4a4c980ebbffb42613ce3aaf27917
-
SHA1
90c90696393c8ccd51fb79a0861bde22637ecd64
-
SHA256
a95bfa5ecd840375e0c78656198ecdd0619c4885429eaf355a37babfdece788f
-
SHA512
ea5a0300a23a640d0b67a619ef2531ed561e2175ef0d98dbd54274f7e36188ed764092e2787e1e1c363148f1f13d18b49ed70b079748a7d351a3eeb5da268ad1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Mvnh:6uaTmkZJ+naie5OTamgEoKxLWsSh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a95bfa5ecd840375e0c78656198ecdd0619c4885429eaf355a37babfdece788f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections