Overview

overview

10

Static

static

10

55eb9d24f4...1f.exe

windows7-x64

10

55eb9d24f4...1f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    55eb9d24f4463f3363f0c9174954a2feb8b0c7388024f05451b48008ec1d321f.exe

  • Size

    707KB

  • MD5

    52e511fe2c4e485b0a6b754251f87bb9

  • SHA1

    d96128b5e0703f7c414263e89144543302e0db7d

  • SHA256

    43da243548d9b0bbbdc0f6fa5b14ca0e26998eb23df8a695506156c7b86fd574

  • SHA512

    9dea4d95a4f9fd7b8f085667232429b10a63bb44a0e835243a16b0569d16c4381fbc27f59e9dde6ef2c0e8f78a9f6d265129364578b3aa21aec5f78fbedf6a9a

  • SSDEEP

    6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s8Bvnh:auaTmkZJ+naie5OTamgEoKxLWHVh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55eb9d24f4463f3363f0c9174954a2feb8b0c7388024f05451b48008ec1d321f.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections