General
-
Target
24ed7d7c19bb15d40e057a0a2c7eda1ca359a3541f5eb22384597d876bffbfa2.exe
-
Size
707KB
-
MD5
b53c844621dbeec68a26e6216c79beb5
-
SHA1
9bf9015665f55cab7924260568130929e6a3466d
-
SHA256
24ed7d7c19bb15d40e057a0a2c7eda1ca359a3541f5eb22384597d876bffbfa2
-
SHA512
2c418e80e9abfd22ab2598d6e57634150c9a0870329be70310309d1385a93a31361f95428f661c3653ab21e66c683c9b4d0f9a5c9667e406cb5591e0219ce94b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8xvnh:6uaTmkZJ+naie5OTamgEoKxLW7lh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
24ed7d7c19bb15d40e057a0a2c7eda1ca359a3541f5eb22384597d876bffbfa2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections