General
-
Target
223a41f117a0db3925eb646fa8094008a2ecb230f654953712a3d3552a2a9bd9.exe
-
Size
707KB
-
MD5
7101baf4e1a84f0a1e5e95692bb8ba99
-
SHA1
540aa85c6ea7a0e7c2ecccfbe68594e95937772e
-
SHA256
223a41f117a0db3925eb646fa8094008a2ecb230f654953712a3d3552a2a9bd9
-
SHA512
acd712dcd0c02aeeb383de339516522b954765a08fe31ff1b11e9b208b511eabc43df700d5740708d31357fb91f78bf7b58696c7987847961f73899f63b80950
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8Ovnh:6uaTmkZJ+naie5OTamgEoKxLWQQh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
223a41f117a0db3925eb646fa8094008a2ecb230f654953712a3d3552a2a9bd9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections