General
-
Target
b1f997ea6a5b6d03a7ce1237498c4b509bf928b209f6b1737b98fc447b59da57.exe
-
Size
707KB
-
MD5
521291e42615645742072cb45ba382a1
-
SHA1
154adec71a6031dea7864859cf3adede04f6d44a
-
SHA256
b1f997ea6a5b6d03a7ce1237498c4b509bf928b209f6b1737b98fc447b59da57
-
SHA512
2311b7862b72378eaad2dce0a53dd195b1a49852846f0a8645286421c71667190ff0c6ea34d15edd4aa10f50f9d6f270321385c7935073c123dd09852a20a191
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R8bvnh:6uaTmkZJ+naie5OTamgEoKxLWcLh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b1f997ea6a5b6d03a7ce1237498c4b509bf928b209f6b1737b98fc447b59da57.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections