General
-
Target
29befa2c8074430dfe63ad92eb2c7ffedd3fc314592c8ed921292cc9b2f4a2f8.exe
-
Size
707KB
-
MD5
975a37260ad0d4c3e1796f11d5dbee54
-
SHA1
ef80a57f99336db24a0bd3cc84656ab44b78a946
-
SHA256
29befa2c8074430dfe63ad92eb2c7ffedd3fc314592c8ed921292cc9b2f4a2f8
-
SHA512
89ebd469262c565cab61f2e0629520a9716368595fa31aa69c874fb18fa6cafb9647d558c14c2c5b3814b0e749250a96ab3e4d29410cf179c3e5dcea86e872da
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158tvnh:6uaTmkZJ+naie5OTamgEoKxLWkZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
29befa2c8074430dfe63ad92eb2c7ffedd3fc314592c8ed921292cc9b2f4a2f8.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections