General
-
Target
d5a5bd17b496e3b5f331ce878e1955790c3dff15bf3de663693fd50306a0f662.exe
-
Size
707KB
-
MD5
1f0e32b6933e924cb6d12f49ea7ea818
-
SHA1
3fbc02cfd380abb4dfab68a1667e1bdbf7459467
-
SHA256
d5a5bd17b496e3b5f331ce878e1955790c3dff15bf3de663693fd50306a0f662
-
SHA512
fd04101705ed0e3ab9fe23e7ff2bcc805bf37a8bb0965dd7723925c5cc0e4917cf996f35bb16581da3814889277290a317b56f61658bca61e7312e132d9b57a3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G86vnh:6uaTmkZJ+naie5OTamgEoKxLWVUh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d5a5bd17b496e3b5f331ce878e1955790c3dff15bf3de663693fd50306a0f662.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections