General
-
Target
b01cbd008f221a7ccac8fd6d55909cba4c98a01fcd107aa94806f090f0c9d079.exe
-
Size
707KB
-
MD5
b47399868fe8d2245a9504af73432e73
-
SHA1
a52b8076ab1c0883774d3f43a4002f37673d357c
-
SHA256
b01cbd008f221a7ccac8fd6d55909cba4c98a01fcd107aa94806f090f0c9d079
-
SHA512
8cae62eafdcc66bfd6701ca033545352a9e956cd5fe7d0ce7353ab1a95903db4168d6318061babf1155529bba51c65c7c9ec2d58699a9f9321ec926ba266db16
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178nvnh:6uaTmkZJ+naie5OTamgEoKxLWKvh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b01cbd008f221a7ccac8fd6d55909cba4c98a01fcd107aa94806f090f0c9d079.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections