General
-
Target
ad928d20ce3ada3e990785d06d25a7dc1745bbc71aa760ce1234233628ac104b.exe
-
Size
707KB
-
MD5
a6c372bd7fa74ffdaca9e76cf5901c7c
-
SHA1
e8a383144afc358555646d5465ea2f1dc4f82dc2
-
SHA256
ad928d20ce3ada3e990785d06d25a7dc1745bbc71aa760ce1234233628ac104b
-
SHA512
7824a84cf8a744ff3cb96a823a99d2ec70614446651af056693a550c7d9ebf818ac2ddeaa3257855b404f66ee3d2c5fc8b713c300ad04624405f76ae63f7ca5c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8Bvnh:6uaTmkZJ+naie5OTamgEoKxLWpVh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ad928d20ce3ada3e990785d06d25a7dc1745bbc71aa760ce1234233628ac104b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections