General
-
Target
33dfeb3d445aefd34c8d4b5220a7f026093a65112f3f3fee0b45042f0a677edf.exe
-
Size
707KB
-
MD5
f83e596ba184939b08195575b71983bd
-
SHA1
cfe4f09c5ea5efda68f41ee61722ebdb9aab5e6d
-
SHA256
33dfeb3d445aefd34c8d4b5220a7f026093a65112f3f3fee0b45042f0a677edf
-
SHA512
38a5a831074be3565e07f249c46241e845943e2de2ef92cdd7a1c91fe9d5939be7f6639d83792c7d339792630ec17e1f009a9439dbfa7336bf712cb73341fac8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1p8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWMRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
33dfeb3d445aefd34c8d4b5220a7f026093a65112f3f3fee0b45042f0a677edf.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections