General
-
Target
b4d88fd375eb0a48f364828738d6c8c55681c4ae545243896e29cb4b0fc55277.exe
-
Size
707KB
-
MD5
ee9e2c36fd129e16bea754b242ae89ed
-
SHA1
35b43480f5204d19474b436a1a44196d5ae1b3d4
-
SHA256
b4d88fd375eb0a48f364828738d6c8c55681c4ae545243896e29cb4b0fc55277
-
SHA512
1484178912736dbc60854f7f2232a4f97c27df191b1f89d56b490da9e87c9b2b8e2bc2646798950477f0dfe86925a599ffa4c7e7c394a2c0b8eca46e9be39b36
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8jvnh:6uaTmkZJ+naie5OTamgEoKxLWoDh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b4d88fd375eb0a48f364828738d6c8c55681c4ae545243896e29cb4b0fc55277.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections