Overview

overview

10

Static

static

10

d523c403f3...86.exe

windows7-x64

10

d523c403f3...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d523c403f382d6bd8ea9a5bde7e18c49386eeb101abef36e26c833abc66c8486.exe

  • Size

    707KB

  • MD5

    861702af438e0d41601d796378fcd337

  • SHA1

    f804d23e00fb233dd71c5b878eef763d6fd26477

  • SHA256

    d523c403f382d6bd8ea9a5bde7e18c49386eeb101abef36e26c833abc66c8486

  • SHA512

    09de02089d6bb0a0d4bf1d05b3497b2d8d5052e55ce14cc545da8cb5a5df596330d475627d31933708306301b86407328844c306c36eab4374afa409b9324f8e

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1w8cvnh:6uaTmkZJ+naie5OTamgEoKxLW7Ch

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d523c403f382d6bd8ea9a5bde7e18c49386eeb101abef36e26c833abc66c8486.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections