General
-
Target
b531ff3735db9dfc45060dbc2ed1496c5f995df0d562889efd599f16bd0c6994.exe
-
Size
707KB
-
MD5
8dc7dc0e6d32c2f8ffd51993c24e9b49
-
SHA1
08c4b671757d8d11a8f93c0e16392ff9a0fd4e7c
-
SHA256
b531ff3735db9dfc45060dbc2ed1496c5f995df0d562889efd599f16bd0c6994
-
SHA512
3b6673649186c73976599d8c6361f4cfcd77bafa6d678803fd0c041d4cd3aee9f15a347e33556a07ba8937066dec5d0877f6a56801bf6d1f4bf9f22e1561e2db
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118bvnh:6uaTmkZJ+naie5OTamgEoKxLWILh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b531ff3735db9dfc45060dbc2ed1496c5f995df0d562889efd599f16bd0c6994.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections