General
-
Target
dbd59e2c450e2d7f411414b521cf43660916b73af640b1004addb5cab80ed2bd.exe
-
Size
707KB
-
MD5
99b3df04c6dbade86bed4371c9b0b21f
-
SHA1
8456bc1805c54b9851064a5687e0e8b6903c5c09
-
SHA256
dbd59e2c450e2d7f411414b521cf43660916b73af640b1004addb5cab80ed2bd
-
SHA512
ee5eb5f03e8c96b25af1583dbf3e96e0949e8d61ebdc10071cdf05a9bff2e19f3b52192129ca44b2fe10cd6ad0557581a5fde96b0907e6f357fa89dc52dae9db
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1/89vnh:6uaTmkZJ+naie5OTamgEoKxLWOJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
dbd59e2c450e2d7f411414b521cf43660916b73af640b1004addb5cab80ed2bd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections