General
-
Target
dab311b2810318b5f2573bec3081e326adca017126c46f423a6e064fcaca95c4.exe
-
Size
707KB
-
MD5
9210f3486b1a2df052ec35041d4417dc
-
SHA1
e56cc49c8b92c3c848d0d1f36ebacfac4f08cf74
-
SHA256
dab311b2810318b5f2573bec3081e326adca017126c46f423a6e064fcaca95c4
-
SHA512
20ecc5c627ef9f135e9e76654fee4e0ef3c2cc51ccee84f5e56d3a209002c84adbe16f1d6ef560a2dc78d9c242b363ac7ebe26cef93ffab1f88e28e0baf35835
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Evnh:6uaTmkZJ+naie5OTamgEoKxLW+6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dab311b2810318b5f2573bec3081e326adca017126c46f423a6e064fcaca95c4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections