General
-
Target
21b56152a91e9e31569a38f85873e501dcad15188deb4e81413d86677676c792.exe
-
Size
707KB
-
MD5
ee8541a9974d59cdccfb90cfd76e78b5
-
SHA1
6ec994481bcfd38b6cdba46bf1104fd28888843b
-
SHA256
21b56152a91e9e31569a38f85873e501dcad15188deb4e81413d86677676c792
-
SHA512
dd4eb3032008623b217cb352506045bb1e2f06cf9eafec70273e40bb8df99bec77bf03db744ff4fc07951a113488a2dbb8904d37344645d50b602764c1f9329c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M82vnh:6uaTmkZJ+naie5OTamgEoKxLWHIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
21b56152a91e9e31569a38f85873e501dcad15188deb4e81413d86677676c792.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections