General
-
Target
c2d577009dbc8ea432b78cbf5e0b39e12d08c1e346fb7753877728a223ea9a75.exe
-
Size
707KB
-
MD5
d8e4e6fbc14bea90aa7b3f4f040bdd24
-
SHA1
8bf5bc3592257a5237c943f56b8a6bb6831b5702
-
SHA256
c2d577009dbc8ea432b78cbf5e0b39e12d08c1e346fb7753877728a223ea9a75
-
SHA512
8cf18383095365be5d95c774f71fa42997a7197dbf94a01ba77779f3238025e78988d8324b6be27ba74c42646a7e6b521e6154c68d46e82b7e3e731839e599b3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8Cvnh:6uaTmkZJ+naie5OTamgEoKxLWQMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c2d577009dbc8ea432b78cbf5e0b39e12d08c1e346fb7753877728a223ea9a75.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections