General
-
Target
24f53dfbc5f467475bdcff81da75b999e3bb7d625f28308721d9da1b24515e7c.exe
-
Size
707KB
-
MD5
aa4215352453c34d017a97a709edff35
-
SHA1
2b7849befd9346e0d4d2a9254581f31b9169d1ef
-
SHA256
24f53dfbc5f467475bdcff81da75b999e3bb7d625f28308721d9da1b24515e7c
-
SHA512
7e770a3a7ea570066e2ba7ca28fe9f452f56a03815366dd46a8934bb3add13e616d157308b38c8fb5748d54e47451dc825e4cf4c1887d5c3fac1b1e89d634f7b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8qvnh:6uaTmkZJ+naie5OTamgEoKxLWtkh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
24f53dfbc5f467475bdcff81da75b999e3bb7d625f28308721d9da1b24515e7c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections