General
-
Target
b43c1ce3d2086159003c5831881b5f12eb858988ca3eebec1d0e6e1b24466bdb.exe
-
Size
707KB
-
MD5
05810c841fa35d970cfbccd511a082ef
-
SHA1
eff575293d5f1313fac46b799be82c0e3a4afa04
-
SHA256
b43c1ce3d2086159003c5831881b5f12eb858988ca3eebec1d0e6e1b24466bdb
-
SHA512
8a93872224001e20efd1b868f4a4e31e68bc178361e2c005bd1e9110dc54d3b9ba42895bdce5f941e2292c104704b0f95192714b6d9994b096851032163093e0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t84vnh:6uaTmkZJ+naie5OTamgEoKxLWwGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b43c1ce3d2086159003c5831881b5f12eb858988ca3eebec1d0e6e1b24466bdb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections