General
-
Target
deb664eccf23d88d3a397ae3a2bcbd1ce7c1d39ec6f9c8745a2f74e28c4b407d.exe
-
Size
707KB
-
MD5
9878e0c82878fd4ed3102a7a50f2eee0
-
SHA1
8ab1f8849605a6a8020fd20e8f919334f7931070
-
SHA256
deb664eccf23d88d3a397ae3a2bcbd1ce7c1d39ec6f9c8745a2f74e28c4b407d
-
SHA512
536dbb4256abb56ced0b4e790af0547c2424caef0b5926f9e709f7e8b5c13b408db569e82e960e90a54bbd8eddf250becbdcc0b7b16bcf9ff408baeae38a9774
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWfoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
deb664eccf23d88d3a397ae3a2bcbd1ce7c1d39ec6f9c8745a2f74e28c4b407d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections