General
-
Target
d1c517263cc60e7e0a09de144159a818ab8dd304bac71fdc123fe1972ba0b8a5.exe
-
Size
707KB
-
MD5
6bd0e7d0afec224670cabeedb0da4c85
-
SHA1
a42be6aa70e1ffbdfad383b163870d90e667ca5c
-
SHA256
d1c517263cc60e7e0a09de144159a818ab8dd304bac71fdc123fe1972ba0b8a5
-
SHA512
d75bba3cbe9e10ad5e85622eb4f9bc3da62ac0b216472c16eb39b8d7eeed653173f4d23a9aa9d2acc78ad7c1c71db2e6e3d9008d40c765243dbe5eb7a54bf48c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1u8cvnh:6uaTmkZJ+naie5OTamgEoKxLWtCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d1c517263cc60e7e0a09de144159a818ab8dd304bac71fdc123fe1972ba0b8a5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections