General
-
Target
b26da1ddcb38182c5d458e31813715d9845f659917b2802f07c861c35f8122a4.exe
-
Size
707KB
-
MD5
c2964a76edba009abe18ef2227d5ba7d
-
SHA1
5b601a5f4c38b8c8a4d848134fc8f1aae56ae8de
-
SHA256
b26da1ddcb38182c5d458e31813715d9845f659917b2802f07c861c35f8122a4
-
SHA512
1d54c77716e1b71c23c0945827112f3383e351a13cae4d7dff328def8c803e33f2d97ebc34d2e0375876a830c0f109f28c5e24f392a1526601650ceb0eacdbd1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1w8Xvnh:6uaTmkZJ+naie5OTamgEoKxLW7/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b26da1ddcb38182c5d458e31813715d9845f659917b2802f07c861c35f8122a4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections