General
-
Target
b2fd615680b56eba43a6e29924a02b9f8dc8f00cc80d2a6c2e26cd721c6d8a15.exe
-
Size
707KB
-
MD5
2e58267a00a3c940fede536191797a1c
-
SHA1
00bceb808d2d2ec978cd06551d107d066022ac19
-
SHA256
b2fd615680b56eba43a6e29924a02b9f8dc8f00cc80d2a6c2e26cd721c6d8a15
-
SHA512
ab8f19d4c615151ddb00c2aeded9aa5bf1297f5dad8e18650e22ca96e94fe749a0674789a65dada14b2345289f261f9d9e1621354e1df58262b07d18fc2e5c7d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza168mvnh:6uaTmkZJ+naie5OTamgEoKxLWJYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b2fd615680b56eba43a6e29924a02b9f8dc8f00cc80d2a6c2e26cd721c6d8a15.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections