General
-
Target
591209e2c730d79a40261620e7e274daa19c505a3d7363e4e8617b6e1b1631bb.exe
-
Size
707KB
-
MD5
2f2ce6108bd03fea60fd2173a8d91083
-
SHA1
41771b7200df5fcc612ab49b2a91417b4f870e61
-
SHA256
591209e2c730d79a40261620e7e274daa19c505a3d7363e4e8617b6e1b1631bb
-
SHA512
5c1738bc830dc5b897f16416ca73ce53d60b6a54c275dc7c74304b4b165720f54b06c8cbd0a81ba63402cb00dfcb4192d2fc55e2531456d544d309add780138a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118kvnh:6uaTmkZJ+naie5OTamgEoKxLWgah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
591209e2c730d79a40261620e7e274daa19c505a3d7363e4e8617b6e1b1631bb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections