General
-
Target
abd40a91c05e96c8d01a9bfe77b853133bd159793ce420965e89110afd0a84e0.exe
-
Size
707KB
-
MD5
1ad95aa6b45362fa23c1f1a1ae28bc4f
-
SHA1
36da5d51a8f9fa0d7f39b823142eb2ebb2624a54
-
SHA256
abd40a91c05e96c8d01a9bfe77b853133bd159793ce420965e89110afd0a84e0
-
SHA512
48e039a27b24877fb54c8acabf286fdad94886f938629342a79c26701586621a823037e09843a8afb9b429e45761f12ae2a180fc51130b70e06344596097a8a1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1i8tvnh:6uaTmkZJ+naie5OTamgEoKxLW5Zh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
abd40a91c05e96c8d01a9bfe77b853133bd159793ce420965e89110afd0a84e0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections