General
-
Target
da53b4ddad6fcda92ec9522dd1cce9c4d9ee34e2506080ccfdc7d2801de62ab7.exe
-
Size
707KB
-
MD5
86d30a10ac54cc8ed3df9c965d59e8cb
-
SHA1
162128ff8b759d05632c384deb416d32a0f6b374
-
SHA256
da53b4ddad6fcda92ec9522dd1cce9c4d9ee34e2506080ccfdc7d2801de62ab7
-
SHA512
3d9acf63d78e7997ac8b62523c8e6271cd1cc0c35ac1da09ef05a6719d042d71d9380db6bb0236dd807fa4670cdae9162fe47e92c593ff6f8f0682029f56b9a9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8mvnh:6uaTmkZJ+naie5OTamgEoKxLW/Yh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
da53b4ddad6fcda92ec9522dd1cce9c4d9ee34e2506080ccfdc7d2801de62ab7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections