General
-
Target
d6af8e1ae0318246afe2866bb193f06cd5ca7dde9e5e80379b670152cc5ad553.exe
-
Size
707KB
-
MD5
b8bdbd0d767090a8e35b50b776fa3c0a
-
SHA1
b1610559eb3c656b158dd34c1f06be5a8b270ef0
-
SHA256
d6af8e1ae0318246afe2866bb193f06cd5ca7dde9e5e80379b670152cc5ad553
-
SHA512
15987100d08fd2fdfe6f268ed50cc4c40e155b6bf4492d07bde15677c5bc011c8c59522ea30376f27ca7473ef86010b0e2aad1fbb25cc8db6eb97e57524f9007
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8kvnh:6uaTmkZJ+naie5OTamgEoKxLWCah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d6af8e1ae0318246afe2866bb193f06cd5ca7dde9e5e80379b670152cc5ad553.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections