General
-
Target
2422dbeee3c063157e84ee162da965e7acbbeac688e7e5b8f9c578f5b260d062.exe
-
Size
707KB
-
MD5
5d54cdcf670682f8dddc063d7a198ee0
-
SHA1
eb8c1ee06921c20aed13bddfb9dd1afed933b675
-
SHA256
2422dbeee3c063157e84ee162da965e7acbbeac688e7e5b8f9c578f5b260d062
-
SHA512
5af165b9b4c25b99274e9f12d234c08db07f9094235a13178336874dcbf39bb745831909a9e46bf54b66456325a08b6c209bfccc5404aba82d6dc83f162df08d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b8Svnh:6uaTmkZJ+naie5OTamgEoKxLWC8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2422dbeee3c063157e84ee162da965e7acbbeac688e7e5b8f9c578f5b260d062.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections