General
-
Target
2c8b57ba27942be9f1d07a083d2a908d5ceaf821e3410931de4c3d6bff11cbc9.exe
-
Size
707KB
-
MD5
46574355dc22f3529a7c5f3c640c849d
-
SHA1
946c38f601738a9c42e0769354390935e3baab84
-
SHA256
2c8b57ba27942be9f1d07a083d2a908d5ceaf821e3410931de4c3d6bff11cbc9
-
SHA512
23c5f58d94f215046005daefa8a90b6bd5bcba30d5b91c1f5304ce92b49221fe910051213c9f4493c7e8d84a163c5ef7043281356bd48b071d95709eec048619
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/85vnh:6uaTmkZJ+naie5OTamgEoKxLWW9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2c8b57ba27942be9f1d07a083d2a908d5ceaf821e3410931de4c3d6bff11cbc9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections