General
-
Target
442f09d93d2e554876f76d88300dbde398661eca75f2108c9439f4a08022b03d.exe
-
Size
707KB
-
MD5
216c8e57e9ef8f67100b7bd1516b41d1
-
SHA1
32ed0e1805292676370a3e160a7942c0b1556146
-
SHA256
442f09d93d2e554876f76d88300dbde398661eca75f2108c9439f4a08022b03d
-
SHA512
2c8fdbaa805f75a99f7174c1ce8e258e92a0e99233d43677cfc722a1587a7c4a0cf8da48bc4c8ab168c2e5731e505b62a22a5b0398dea00fee7c5d4f65e748db
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1V8Bvnh:6uaTmkZJ+naie5OTamgEoKxLWYVh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
442f09d93d2e554876f76d88300dbde398661eca75f2108c9439f4a08022b03d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections