General
-
Target
211ca33b445dd7712253f749f1681fb749aba14663a235d87d9af6fd15da59eb.exe
-
Size
707KB
-
MD5
09dc58e068847c988f16430d79c9f679
-
SHA1
0140493d865aa5feb69addf5b4532df8607f3074
-
SHA256
211ca33b445dd7712253f749f1681fb749aba14663a235d87d9af6fd15da59eb
-
SHA512
0bc71d7e70abc65a8608c905638d75e9788c022799fce90aaa10d7a2e25df0e1dc7bcba25e3a6177d283c8d6ee4189cc4f28021bcf088d83e1adfcf7f1504dd0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p83vnh:6uaTmkZJ+naie5OTamgEoKxLWUfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
211ca33b445dd7712253f749f1681fb749aba14663a235d87d9af6fd15da59eb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections