General
-
Target
d44725f660a527ef1996bfb01c34d14227ec769a6278057647d709c0d69b6251.exe
-
Size
707KB
-
MD5
636206e98947e942a2f64d25850b22b6
-
SHA1
41ffe7846a6382d12a2a9a52fc41d5a4e9f57084
-
SHA256
d44725f660a527ef1996bfb01c34d14227ec769a6278057647d709c0d69b6251
-
SHA512
c92659061e8449d937b5da890a20b4ed225897006d80098aff551f0f7308d90a500266b755a491ef264bfb2de9b5160478265c5c102cdfb70f9767f914413dcd
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1u83vnh:6uaTmkZJ+naie5OTamgEoKxLWlfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d44725f660a527ef1996bfb01c34d14227ec769a6278057647d709c0d69b6251.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections