General
-
Target
b043bf42ed3ff19a71120cc17e0b3765f1325924d0922a1578a3a865335659bd.exe
-
Size
707KB
-
MD5
5b95914a28d45008c52fc29aec744936
-
SHA1
fa96e2724c1a2c59f1f841de74f3c8c882951494
-
SHA256
b043bf42ed3ff19a71120cc17e0b3765f1325924d0922a1578a3a865335659bd
-
SHA512
cde0158a1c73f74c13f820636622c3f4f51ed79160ccd0876bd4dd52c01da15cc783b6208d6cf9f0326009fb4cba0dbee2e928f5a01cdcb23df5eb18adf9baf1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8dvnh:6uaTmkZJ+naie5OTamgEoKxLWWph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b043bf42ed3ff19a71120cc17e0b3765f1325924d0922a1578a3a865335659bd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections