General
-
Target
1a2f2e906f17800392f1fd73676db9d91385db115535cdca89c596705ef834a0.exe
-
Size
707KB
-
MD5
5efaf2ca8c0d0f4d194457bbad4e4f4a
-
SHA1
b661ffe6641ab86153a4902afe7debc21f430af4
-
SHA256
1a2f2e906f17800392f1fd73676db9d91385db115535cdca89c596705ef834a0
-
SHA512
e8700b46bf5bcc6bd0504ac1c6b78bb16d0347418302f764d6ac646d7a28e3579dc0a82831e9e624be05f674aaeece187a6981ec2a2573e50f7dc1bd00fd54f2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G89vnh:6uaTmkZJ+naie5OTamgEoKxLWVJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1a2f2e906f17800392f1fd73676db9d91385db115535cdca89c596705ef834a0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections