General
-
Target
b15fda1c054b72fd7d09784d1f9cc976049495a88819fb9b0d806e4f735ac94d.exe
-
Size
707KB
-
MD5
a13dd1e27ad03a1898a0f83202dc5ae2
-
SHA1
22eb1b5c3ddcc6d57fb8b7ecf6598a05f5597415
-
SHA256
b15fda1c054b72fd7d09784d1f9cc976049495a88819fb9b0d806e4f735ac94d
-
SHA512
10be6f2805fe8700fb5f3174a0cc449f8c05ce6ee7dba1fd0e2d3c003f0a4794ca71fef4f857cd6117daec40b53cefbdc71e8bb3098c6e6d5be50242d72ed70d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1u8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWVhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b15fda1c054b72fd7d09784d1f9cc976049495a88819fb9b0d806e4f735ac94d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections