General

  • Target

    b2a5f6bc945462eac9beb433db15245734acad2f3a6007302f30bd03df07b330.exe

  • Size

    707KB

  • MD5

    9845b5ed658879751b4fd89609759ef4

  • SHA1

    b45e753d5d1e62659f88aa51a25d3ec9abb5b899

  • SHA256

    b2a5f6bc945462eac9beb433db15245734acad2f3a6007302f30bd03df07b330

  • SHA512

    5136fc66f5a233c5bd278fa55351ba9985e8d057f728cf709519a07ece726d44c54e8da63922bf17e48493b9ce3b8d52d6018373539b544247ec1a887e344bec

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8mvnh:6uaTmkZJ+naie5OTamgEoKxLWpYh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2a5f6bc945462eac9beb433db15245734acad2f3a6007302f30bd03df07b330.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections