General
-
Target
2bc4a2fe5f8575b88463a46632ca2ddd0254df1558f4dd65a13ae3e1013349d2.exe
-
Size
707KB
-
MD5
80ece49e76f63b738e00366843870c32
-
SHA1
568fce337b3cb139ddb204bb9524512aec664623
-
SHA256
2bc4a2fe5f8575b88463a46632ca2ddd0254df1558f4dd65a13ae3e1013349d2
-
SHA512
20f843a977898265739d06d492e9e3c0a30343aac65bba51c1a242766084074315287bc5525a253d190cb07f930a96bfcc1b7f173a04407ba1e4bec4bbb2b35c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8vvnh:6uaTmkZJ+naie5OTamgEoKxLWGnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2bc4a2fe5f8575b88463a46632ca2ddd0254df1558f4dd65a13ae3e1013349d2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections