General
-
Target
392e21d10f29afadf2d4e0516c3a413f3fe0e21102263ac77af369746e1b7550.exe
-
Size
707KB
-
MD5
dcb52cb0e3ab397c8c10ad618e793804
-
SHA1
cd214d2e9c6d69cdd2db8f73eb608e6fc65e8b54
-
SHA256
392e21d10f29afadf2d4e0516c3a413f3fe0e21102263ac77af369746e1b7550
-
SHA512
d476e1216b546cb4202a070ec34a8f4564068e1d5532ef9838deca4e647e6552f465cf171b34912bf75be6e1e90f2345c51b6c12c9400539c731c366bafb66ba
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8vvnh:6uaTmkZJ+naie5OTamgEoKxLW1nh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
392e21d10f29afadf2d4e0516c3a413f3fe0e21102263ac77af369746e1b7550.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections