General
-
Target
ac4b22d98790ab38a6715997684c5181fc71e06cd43cf6aee1f82cad088acef1.exe
-
Size
707KB
-
MD5
1ab71066856a5a4ea5f681d3e75ff155
-
SHA1
250f07979f0bd5f68742da0da9bf22efb2561c9e
-
SHA256
ac4b22d98790ab38a6715997684c5181fc71e06cd43cf6aee1f82cad088acef1
-
SHA512
c042f261b194a9f3ef2b9e4e8131c4d8d69b99165aac5c6a773aa58809e1b70661e231693247ff4185256288a4cb3a2ea2e7743494b220296bf9c349866bd92b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K86vnh:6uaTmkZJ+naie5OTamgEoKxLWxUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ac4b22d98790ab38a6715997684c5181fc71e06cd43cf6aee1f82cad088acef1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections