General
-
Target
21565c405409e947d3308c54ed1b6db6f8a1f08c43838a45b72b480d0dbd0ee6.exe
-
Size
707KB
-
MD5
2ac2b8a095f09c46f85f9de6f2d4da23
-
SHA1
093004a1242072d8900622516bdd219488890a28
-
SHA256
21565c405409e947d3308c54ed1b6db6f8a1f08c43838a45b72b480d0dbd0ee6
-
SHA512
b9000c18e06ac0a5a6cc3b88f2b9bfaa94013582fb6a83b50bc98b202647c7e410425948ec1a02222b1c4fd6b488822cc6f7c9d6add8e89efefeb6b0009be0c6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8+vnh:6uaTmkZJ+naie5OTamgEoKxLW2gh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
21565c405409e947d3308c54ed1b6db6f8a1f08c43838a45b72b480d0dbd0ee6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections