General
-
Target
af1da6b146b39927f73b448685db2e2c60c6cd83cf2b79bac3d23a8e86a951de.exe
-
Size
707KB
-
MD5
d40d60b881ff37fbc108b8550d86f55f
-
SHA1
5e23760488ff24f1f247c6a0eb2c1dc82908c366
-
SHA256
af1da6b146b39927f73b448685db2e2c60c6cd83cf2b79bac3d23a8e86a951de
-
SHA512
fe3cb2227fb4ce993d36c13209c95959a3df550bdddce4a118bd01e7557e04b8b34a91fce2085c885855152380bb95777d741c8c845557bc2bd7bad7111ac53a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158bvnh:6uaTmkZJ+naie5OTamgEoKxLWELh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
af1da6b146b39927f73b448685db2e2c60c6cd83cf2b79bac3d23a8e86a951de.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections