General
-
Target
10a741a2f8b7adab619ecf2de0d3eb3ed2105daad03e53bf2629c542443982aa.exe
-
Size
707KB
-
MD5
365a0932a996df972abe8034a2b12c20
-
SHA1
23ce1f2d6c913aa26e759ae5909d23c0c4206624
-
SHA256
10a741a2f8b7adab619ecf2de0d3eb3ed2105daad03e53bf2629c542443982aa
-
SHA512
38a0ec24bd4046266de91e29dc0def4a6f8565ad723212ef77ec35968a94e39ad093ebabd436e2e1d2d878c53a6b244d175f81366489f616c345f0caa7a3b0d0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128vvnh:6uaTmkZJ+naie5OTamgEoKxLW9nh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
10a741a2f8b7adab619ecf2de0d3eb3ed2105daad03e53bf2629c542443982aa.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections