General
-
Target
dd495f1e17414e603e10d0e560452b57e1bf32b96e31076126e33773c5a96ef6.exe
-
Size
707KB
-
MD5
0edf2c0f7bf6a924c34c68203c6faaee
-
SHA1
7744a0523287d4cb5309a6dce776e8ccd16f7644
-
SHA256
dd495f1e17414e603e10d0e560452b57e1bf32b96e31076126e33773c5a96ef6
-
SHA512
91a766ea4a78bc9e1f1c8730a12f75e380b009bd362db32d57a1e285c23dad90417b40bec06bafe6935841073f5be5ede1a3fec2736f33ddcf807250a17d4916
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8fvnh:6uaTmkZJ+naie5OTamgEoKxLWC3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dd495f1e17414e603e10d0e560452b57e1bf32b96e31076126e33773c5a96ef6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections