General
-
Target
21a2870ad548ee8bb8adbf54af072e473e6b49c3400d6652a71f946f0bca4373.exe
-
Size
707KB
-
MD5
e93ee37c82183ceb83b420f609274960
-
SHA1
d4c8ba408fdc73e83d1a9b3a8ba2ff7ae64957af
-
SHA256
21a2870ad548ee8bb8adbf54af072e473e6b49c3400d6652a71f946f0bca4373
-
SHA512
3ed6a6e969c27c632e44ca8f9af97510d3a7af6bf13e912d1e31d083ec30061a8febcba957c8817d26b7d18a36f2b4f9fbf1287e18657c2f78d4c89966e41f36
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8vvnh:6uaTmkZJ+naie5OTamgEoKxLWFnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
21a2870ad548ee8bb8adbf54af072e473e6b49c3400d6652a71f946f0bca4373.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections