General
-
Target
24c64c59b790a50425d119c91c7c4c327db67f9ceac2987956c5411c88629f6b.exe
-
Size
707KB
-
MD5
2ce25f9464a09a030a628af76ce31ef4
-
SHA1
44be813fcb1bcf1721d35676f748a4bffee3a1ed
-
SHA256
24c64c59b790a50425d119c91c7c4c327db67f9ceac2987956c5411c88629f6b
-
SHA512
2b5ac4e026818cacbfcc638f8bf79bf90c4f6c8e97597544e98252157c7865190e2822101baa3674116b5b8053b61d4116fd15750f9d65b22b40db2f6dba514a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8qvnh:6uaTmkZJ+naie5OTamgEoKxLWMkh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
24c64c59b790a50425d119c91c7c4c327db67f9ceac2987956c5411c88629f6b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections