General
-
Target
b30c60555ebb933ee6a17e9c3b49ee3a7419ca518a341d9ed569a1a5db6644d2.exe
-
Size
707KB
-
MD5
45b0e64491fc955e1ead5ea08debffd4
-
SHA1
181c71fa99004fcb5cbf3656fd227bc5dfce13b5
-
SHA256
b30c60555ebb933ee6a17e9c3b49ee3a7419ca518a341d9ed569a1a5db6644d2
-
SHA512
cb350a3c2e2b99f8c4485298ac104f493122192e4ae45b23aeffff8ab4a1092a2e4f7e73cc928e9a73c51d24d128a3e37c1c442fb20728e4ff56d13427e04e12
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8cvnh:6uaTmkZJ+naie5OTamgEoKxLW+Ch
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b30c60555ebb933ee6a17e9c3b49ee3a7419ca518a341d9ed569a1a5db6644d2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections