General
-
Target
ce2f4735d92324e6bebafe8605442430acd5d8c532f6948bd7099cc31638813a.exe
-
Size
707KB
-
MD5
c9765ca6921201dc016c65af49363416
-
SHA1
feca12c84cbdd103ebdba13c7fa0af0051a6f5e1
-
SHA256
ce2f4735d92324e6bebafe8605442430acd5d8c532f6948bd7099cc31638813a
-
SHA512
41147e74c12ef77010ac9fb1456750e5b63ac3afda8814062a0f3a68f072c8bc8e257390958522393c7a5a952db7a87cde46e7e15712c26b831c7236e23ff232
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h8dvnh:6uaTmkZJ+naie5OTamgEoKxLW0ph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ce2f4735d92324e6bebafe8605442430acd5d8c532f6948bd7099cc31638813a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections