General
-
Target
2cf6e540dd6c2e579660c6b23500ef7c08fe229673c23f63026207e20e8a1997.exe
-
Size
707KB
-
MD5
f0864c5435c0a97b034bd0a77d4f30ae
-
SHA1
95db0bb6f0fd89f83456ff15f0798a4f22aee0b8
-
SHA256
2cf6e540dd6c2e579660c6b23500ef7c08fe229673c23f63026207e20e8a1997
-
SHA512
6b03d707f772f6f1e0908f120d7273faff9d3993b921b5e83f794452d210cff751878a3671edd5ac5e2a4891c73c4cc014ce6aafc3d26745d758fa0257e47663
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8cvnh:6uaTmkZJ+naie5OTamgEoKxLWZCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2cf6e540dd6c2e579660c6b23500ef7c08fe229673c23f63026207e20e8a1997.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections