General
-
Target
b645b0aca51ba31c8089dc3e8ec2fb68a13d22156d4713e11a2c24d8617f432b.exe
-
Size
707KB
-
MD5
2505a258cdc7cd44b2c45ccd92217a3a
-
SHA1
0dde7d2a15892dafc2af4796850ce653a022e533
-
SHA256
b645b0aca51ba31c8089dc3e8ec2fb68a13d22156d4713e11a2c24d8617f432b
-
SHA512
216255bb9439a86030bbb36208085106b284d6bf3bc647ffc2a4e14b1460237102904e90bb6ece8bbce0a21ed991c894473aa9ef0238cc9679d7592013c95a00
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWGQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b645b0aca51ba31c8089dc3e8ec2fb68a13d22156d4713e11a2c24d8617f432b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections