General
-
Target
2f2cf0889186fdf88fadee99e135f7416b6c5422551830ebc1a08b69bc6b0a24.exe
-
Size
707KB
-
MD5
8657f7e14cfbaf3e773836798af36865
-
SHA1
da03f0acb5d122ca040f1efaaf0ba475ce0d1931
-
SHA256
2f2cf0889186fdf88fadee99e135f7416b6c5422551830ebc1a08b69bc6b0a24
-
SHA512
055862b7964e69eba1cf46b51a95e576231cadd6f07b90a315534acfd856c2b500b99cd95dd9a0b766e3570eeb4080e4df62d8ad52d28465b1f247bdb72e4b34
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8gvnh:6uaTmkZJ+naie5OTamgEoKxLWO+h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2f2cf0889186fdf88fadee99e135f7416b6c5422551830ebc1a08b69bc6b0a24.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections