General
-
Target
33002aeb53de2c1e8aebab4924993eb4e2f36f17788fb7e1de9ee7e70c203125.exe
-
Size
707KB
-
MD5
2defb6999b8ab7a5f83fbfd8cea2bf95
-
SHA1
110045b610930108f34c0b1b5ff0f68e29b9fe76
-
SHA256
33002aeb53de2c1e8aebab4924993eb4e2f36f17788fb7e1de9ee7e70c203125
-
SHA512
dbd4fddc9015b26f91e62c54e4a25b2a1dce0995184328a877ea8701918f42d4970860ee2028ddfd50eaf8b3abcfacff6b151864a12343e339e17324c3296387
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8svnh:6uaTmkZJ+naie5OTamgEoKxLWryh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
33002aeb53de2c1e8aebab4924993eb4e2f36f17788fb7e1de9ee7e70c203125.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections