General
-
Target
ad0abc42515126a3636ea1ad7881b2e14f35a9e53e90b01fe73b3383ac9d9eb4.exe
-
Size
707KB
-
MD5
d375b29d595d7364c4c8601ea301185d
-
SHA1
a5334d7b0d48b9fc148b9dc248b9e89c089b2c5c
-
SHA256
ad0abc42515126a3636ea1ad7881b2e14f35a9e53e90b01fe73b3383ac9d9eb4
-
SHA512
8521e18d321f71f381c0f3293374a016142daf7ead90f74fd753c5ca61fe30adcfd28c233a6a357f832a56100556317e27d4ea8aa44708ff8ba1e191469465d8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8qvnh:6uaTmkZJ+naie5OTamgEoKxLW/kh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ad0abc42515126a3636ea1ad7881b2e14f35a9e53e90b01fe73b3383ac9d9eb4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections