General
-
Target
24e4ede4022dcfd7fb2e66722f05994e124503080a859393e76ddc75b050ef59.exe
-
Size
707KB
-
MD5
0a3deecb9e0bd4291a452126b3f3a395
-
SHA1
a5dde1a815d72b258bbe7faeabe1056966b472cf
-
SHA256
24e4ede4022dcfd7fb2e66722f05994e124503080a859393e76ddc75b050ef59
-
SHA512
0bd107b8a2efa08e45b773cd73131783563a1d1f86e9c6c4f7691194fd5ba6e64769f0d92b3667325dfc1f08de1f0acc3a63d80bd10e3ba4dc24d025b318fbf2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1V8/vnh:6uaTmkZJ+naie5OTamgEoKxLWYXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
24e4ede4022dcfd7fb2e66722f05994e124503080a859393e76ddc75b050ef59.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections