General
-
Target
2bf9d6680de5e802ed9bec8ca9daf0770176c5eeebda0232f8ad203c24c0a71b.exe
-
Size
707KB
-
MD5
e937343284ba4e2d8ef7f14d78438b21
-
SHA1
c83a4872c9ca3bb49ccceace1c8b5d96e95b2eaa
-
SHA256
2bf9d6680de5e802ed9bec8ca9daf0770176c5eeebda0232f8ad203c24c0a71b
-
SHA512
0963da5ab2e7c3d013a9dac4c97b5e88ff2d072c22949fa13449a03ea63887ed1f0f78cd6162361921363b71252b38a4a5812236cf97377c4d638ff284c31cca
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8Xvnh:6uaTmkZJ+naie5OTamgEoKxLWX/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2bf9d6680de5e802ed9bec8ca9daf0770176c5eeebda0232f8ad203c24c0a71b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections