General
-
Target
39dc13d4b858bce8b9d38d9b10f3caf1afd0dbd0604181fe26650c290ec5cc9d.exe
-
Size
707KB
-
MD5
260dbbda91b15b0e21e985b87d6b27c8
-
SHA1
8ea58e8dc694225cff19e06f6f1fad531c83b2ad
-
SHA256
39dc13d4b858bce8b9d38d9b10f3caf1afd0dbd0604181fe26650c290ec5cc9d
-
SHA512
f8598afeab1dd4b228ddb2795ce5e73eb07b76c67339312c6c4ed8846f39bf67d15329ffa682f3363a3ff269bd5577af43c1697171bd0b74e9f3aaa5f6b1245a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8Nvnh:6uaTmkZJ+naie5OTamgEoKxLW/5h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
39dc13d4b858bce8b9d38d9b10f3caf1afd0dbd0604181fe26650c290ec5cc9d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections