General
-
Target
1cdbab5f2bb011e2c049dc6119fd29e56253fae84df7bc6e2846aeb7898eb04c.exe
-
Size
707KB
-
MD5
aa0102d41c7d8afbfae4f1e2b23217be
-
SHA1
0f18424840941b858fb4c0f7e0799a86ffe574ce
-
SHA256
1cdbab5f2bb011e2c049dc6119fd29e56253fae84df7bc6e2846aeb7898eb04c
-
SHA512
9fa5b5dd1ed915e9109f6616e37dc1fdf35f568cb14a3bd978403dcc2c2e113bfee4985a7bb6be1e7d95658e4e84a976710807cb7f2211716702d2a4c0115f7d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1e8Avnh:6uaTmkZJ+naie5OTamgEoKxLW1eh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1cdbab5f2bb011e2c049dc6119fd29e56253fae84df7bc6e2846aeb7898eb04c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections