General
-
Target
2e1d1c4df66e9d0170d431d030cf15d17b80868e5c8a5c0a8446228fb2f0f1f9.exe
-
Size
707KB
-
MD5
7cece5e6516ac976ef358386b2f4ab34
-
SHA1
d718770dc85006ed44a91d1bf6019d6281d8b9eb
-
SHA256
2e1d1c4df66e9d0170d431d030cf15d17b80868e5c8a5c0a8446228fb2f0f1f9
-
SHA512
7aca57300ca41974f3b571a5f91501f5df0076ac2c53ed0ca69cb99d64b8ecf8d0e28f7322fd90bfb42e076ef68817d84aa820af098f38091308638892edbbc1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198Cvnh:6uaTmkZJ+naie5OTamgEoKxLWgMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2e1d1c4df66e9d0170d431d030cf15d17b80868e5c8a5c0a8446228fb2f0f1f9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections