General
-
Target
ad19867152ed4eccd4d7e8d632ef839f4073271e6049709c183a47ecacd441c5.exe
-
Size
707KB
-
MD5
c8858bc5b49cc6c8c3956c6832d3f173
-
SHA1
5457e4ece5731ea9442c9fc3fe60f1e4e1e171bd
-
SHA256
ad19867152ed4eccd4d7e8d632ef839f4073271e6049709c183a47ecacd441c5
-
SHA512
b3999a40580759c5f9c554874d06a01e4a2e7282a46b963e2317eee749e4ba79734d073b7a376950fff5afbd38e9713cbf07bdc0bb67025ec25b6f2c7b4741e9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X89vnh:6uaTmkZJ+naie5OTamgEoKxLW+Jh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ad19867152ed4eccd4d7e8d632ef839f4073271e6049709c183a47ecacd441c5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections