Overview

overview

10

Static

static

10

02783c58ca...53.exe

windows7-x64

10

02783c58ca...53.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    02783c58ca3e0be1df6e3cebd20da87b5c2c1850ad10702bbe8675b3c4102453.exe

  • Size

    707KB

  • MD5

    d045e641f9f81ea2dee531750979f90e

  • SHA1

    08bb0fc2b0a9b64b01768733b44055dfb3b4a8b2

  • SHA256

    02783c58ca3e0be1df6e3cebd20da87b5c2c1850ad10702bbe8675b3c4102453

  • SHA512

    5a6b688b8470e9862b75db231c3613aa9573481961457d847782ea965896883e24418f1a449b15ef4347a7fce73a8abeb7de484601b58d92a43ce21aa9e9de45

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8Rvnh:6uaTmkZJ+naie5OTamgEoKxLWYFh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02783c58ca3e0be1df6e3cebd20da87b5c2c1850ad10702bbe8675b3c4102453.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections