General
-
Target
d4a35c167de796d110d039295051f682056abf80782b9edd7c3e204374a1ea24.exe
-
Size
707KB
-
MD5
359b4b2ccf2ab1850a6d417474c85e32
-
SHA1
72d3a46044596404ee81cb6d072e4014543cb840
-
SHA256
d4a35c167de796d110d039295051f682056abf80782b9edd7c3e204374a1ea24
-
SHA512
1bcd73ebe758ba83b0c14d5b327ac0de16babf0c217c3b92760a5782904995c7d99be5824a4c55beef4bc65ec55583466ac24945e01464a7a866103ae2d182e0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8Dvnh:6uaTmkZJ+naie5OTamgEoKxLWbjh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d4a35c167de796d110d039295051f682056abf80782b9edd7c3e204374a1ea24.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections