General
-
Target
b0044655d8d72860ec6b0b12699583300db88134374d354725289f6016b196d2.exe
-
Size
707KB
-
MD5
f812221e8a7780feac9f1f37b0242158
-
SHA1
aa2493eedbca2a83a651a22e5ddfc12d796f88db
-
SHA256
b0044655d8d72860ec6b0b12699583300db88134374d354725289f6016b196d2
-
SHA512
3810ff3329bc24973c013f55bf816fa2a46152621c339632bd31f490671419b8aa088a9efb292c26665a7b6d1a9fb4efb76ad6c6247b20dd0393e899facac228
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E82vnh:6uaTmkZJ+naie5OTamgEoKxLWnIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b0044655d8d72860ec6b0b12699583300db88134374d354725289f6016b196d2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections