General
-
Target
b53f5173c71720fa675bf672d52fd1ce2adf45d5bdf18d68037a79be23ab5654.exe
-
Size
707KB
-
MD5
857c6b1ade197582b3ced909cff8627f
-
SHA1
1f3b9551f6ace7c931bca603928566c338651a10
-
SHA256
b53f5173c71720fa675bf672d52fd1ce2adf45d5bdf18d68037a79be23ab5654
-
SHA512
aeaa6517f37131f75573ef6fccc4ef91cad01f615a6bf679b6d834e364f7ac31f19fdaf0b1f8d83a63aa58aa17b1de8cddaa6eb46ffd49c1a024c6a4c8337655
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Ovnh:6uaTmkZJ+naie5OTamgEoKxLW1Qh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b53f5173c71720fa675bf672d52fd1ce2adf45d5bdf18d68037a79be23ab5654.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections