General
-
Target
adcd610dba01f80a055949ea18863ac6dbaa10e1c8fadbd5a1ae72db9f623a88.exe
-
Size
707KB
-
MD5
75cc78d195ecf8c2933ccc0c92052cf8
-
SHA1
8d8267c02c6d84ed1e85c3fd201b64e5671ce21d
-
SHA256
adcd610dba01f80a055949ea18863ac6dbaa10e1c8fadbd5a1ae72db9f623a88
-
SHA512
0698e1460a69bef06cb6ff6dd25e257d51b200c020269fd710e564096b332280674ee588308efe1d3049e364d4d9a23e65ed2fe267c70a85861ed8239d5de75c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8Jvnh:6uaTmkZJ+naie5OTamgEoKxLWwth
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
adcd610dba01f80a055949ea18863ac6dbaa10e1c8fadbd5a1ae72db9f623a88.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections