General
-
Target
cec10d7aeaaeccd5bbbb615df0dd0e6f701bac73b2046878071cd066cbe314b9.exe
-
Size
707KB
-
MD5
8a9b3e289f11d33092ec4301ace122c1
-
SHA1
91cf425fd982a7b7bfdf17ccbe0e5792ce6f82c4
-
SHA256
cec10d7aeaaeccd5bbbb615df0dd0e6f701bac73b2046878071cd066cbe314b9
-
SHA512
2fe1ec9a96037f23096290c7a0b9a05a4453ea77078d369024261d0ed390f6658c5c1dc02b86d59fc1dba9cbe76a7911e6d103227bc63211d55baf6123f73a8f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8dvnh:6uaTmkZJ+naie5OTamgEoKxLWQph
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cec10d7aeaaeccd5bbbb615df0dd0e6f701bac73b2046878071cd066cbe314b9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections