General
-
Target
2d9a3d659bff5e63cab6363bff35bbc330ef206488e864953179cbc9786d52c2.exe
-
Size
707KB
-
MD5
07a07ad54d930a60b8f82eab5de0017d
-
SHA1
dcbdcd6651e1bfdc5029d6fbcd16bf914caebf0e
-
SHA256
2d9a3d659bff5e63cab6363bff35bbc330ef206488e864953179cbc9786d52c2
-
SHA512
fac087b2abf6dbfe7bdeb1c98089d85f311ae5b154f74c7783ba1566a825094402dca56dec9903030c206d9f9f8be4e9a4517c9d4a4904fbc7063a7eb34e97bf
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b8avnh:6uaTmkZJ+naie5OTamgEoKxLWC0h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2d9a3d659bff5e63cab6363bff35bbc330ef206488e864953179cbc9786d52c2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections