General
-
Target
01c1ad93a01c0e7b73a0827e4efcaac82a8ca16c76d462f0593af06a440cbe63.exe
-
Size
707KB
-
MD5
27af58ab426838960d46b9ceeaa66dbc
-
SHA1
626c83f965b03b0d31a2c10dddecf4cbbcd1326e
-
SHA256
01c1ad93a01c0e7b73a0827e4efcaac82a8ca16c76d462f0593af06a440cbe63
-
SHA512
fe3f669de8554d627a9852dc0a51b9c3a015753aac2c8d715179298477c58766ad96028d1d426af65ec56f7b4d65a951eb96e7b735f8d62aab395d063322412f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q84vnh:6uaTmkZJ+naie5OTamgEoKxLWxGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
01c1ad93a01c0e7b73a0827e4efcaac82a8ca16c76d462f0593af06a440cbe63.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections