General
-
Target
b25be54ee96da976ab71c7910819a5a5f087bd1e3965e8d9077d0b143e554b85.exe
-
Size
707KB
-
MD5
9d7bbb28597777f8abcb994f2f4d00d9
-
SHA1
6fe6f8293d7c95594ac18c9939f505d9a5fbc628
-
SHA256
b25be54ee96da976ab71c7910819a5a5f087bd1e3965e8d9077d0b143e554b85
-
SHA512
d8994e02fb4ae26d65bb0676e2b76e295849ff04673e0685e8e33574ceef903c68f0e9bbfc3131a5dc9448b5f910035e5b4172e21496378a31fdf48dd32fdd6b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128Dvnh:6uaTmkZJ+naie5OTamgEoKxLWdjh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b25be54ee96da976ab71c7910819a5a5f087bd1e3965e8d9077d0b143e554b85.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections