General
-
Target
58ccea433e5c9a3dfd2715f5ce6cdf4c2c9737e7223269d46c9946de1bfb3b8e.exe
-
Size
707KB
-
MD5
2d9e9070ec8b5b9d6e9d6e3e72e2c568
-
SHA1
ffdac13a68257faaaea82579d99ca26664435a9e
-
SHA256
58ccea433e5c9a3dfd2715f5ce6cdf4c2c9737e7223269d46c9946de1bfb3b8e
-
SHA512
4fe80957dc63c51191ecaaeaa0821d5c119333d63ec6101d3a4f5fc7ff3ab32cd6a6e05a7a5f141f338b21c574296fb0e34cb13316dba8126e9ecb9d1c7dc971
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Q8Svnh:6uaTmkZJ+naie5OTamgEoKxLWT8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
58ccea433e5c9a3dfd2715f5ce6cdf4c2c9737e7223269d46c9946de1bfb3b8e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections