General
-
Target
28675b4090645ef98b3c2820331665ce4434fcccea4972ee563a52ee6fe8f2df.exe
-
Size
707KB
-
MD5
29a2ae19592c9b129b7e4155badccc2d
-
SHA1
ebf15f318201b00ed4c14c66335f29a56c338249
-
SHA256
28675b4090645ef98b3c2820331665ce4434fcccea4972ee563a52ee6fe8f2df
-
SHA512
afd6a3482a37efba9523a150b114e33fb638047b1c1be10f05a3c968154cb993cb49c6bbae9ecddc3cad5b19b487d5267a876906f05d462db3ebfc2e969ce52a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Vvnh:6uaTmkZJ+naie5OTamgEoKxLW+Rh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
28675b4090645ef98b3c2820331665ce4434fcccea4972ee563a52ee6fe8f2df.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections