General
-
Target
dbcbf041149551c19800a010d554a98548aa46fba320f223b6d144d4084372a2.exe
-
Size
707KB
-
MD5
dfd19e5563f25616f8e0f5daf80afffd
-
SHA1
820f8a6bc7419a78504b36c8ed5e5ddf3bedc0e3
-
SHA256
dbcbf041149551c19800a010d554a98548aa46fba320f223b6d144d4084372a2
-
SHA512
ad72e46e26b92b3ab11da5ec6243a0ace99ab9831105c8da3e5616ae64a1561bb02ec35336d06a499d0fca89863ab76c526d1d1e04369da040d14f475b504521
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R84vnh:6uaTmkZJ+naie5OTamgEoKxLWkGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dbcbf041149551c19800a010d554a98548aa46fba320f223b6d144d4084372a2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections