General
-
Target
01d1dcd3e8dd35b0bafa9659ee2c062e669163c30b206a40f04b7dd0245dc5c0.exe
-
Size
707KB
-
MD5
24ca6479d318b8dbd5dd8479e9b2979f
-
SHA1
44c5331faf72c69c009f1c76525b7df1214226bf
-
SHA256
01d1dcd3e8dd35b0bafa9659ee2c062e669163c30b206a40f04b7dd0245dc5c0
-
SHA512
0c2fb71fa17159112a1b0099d605edb96e5e7fafa4dfa2c50141c8e9bc99cf1dfc5b42fa57670c366228bed5da195372fcc5637cb80faa210ef0ce24cb3c398f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d87vnh:6uaTmkZJ+naie5OTamgEoKxLWwrh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
01d1dcd3e8dd35b0bafa9659ee2c062e669163c30b206a40f04b7dd0245dc5c0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections