General
-
Target
2d8169e771f967844ff8a04e4251dd38635d2b68e29b9efcfa717ce04b1438b7.exe
-
Size
707KB
-
MD5
eef369d24fda888b7da6de41ef41168a
-
SHA1
74337072c1bd0fc5b795309e8afc7fc92eff8960
-
SHA256
2d8169e771f967844ff8a04e4251dd38635d2b68e29b9efcfa717ce04b1438b7
-
SHA512
bb0b7d1ba721b90b09c8298c0354a61196016a85e945dcdf2f53c1eaef7392d3e57b811ed54d080e1effa29eadd5ff466ad3c931e04107233bce17b03b42753b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Evnh:6uaTmkZJ+naie5OTamgEoKxLWm6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2d8169e771f967844ff8a04e4251dd38635d2b68e29b9efcfa717ce04b1438b7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections