General
-
Target
48627f1baad98b179f13798c6e81634d739c1e3a10666ff5fa92aade6122fc58.exe
-
Size
707KB
-
MD5
4000affbd06d15a46271c480aa8e653f
-
SHA1
07b572c68a53c7cdef5daefbf013f77bff124c70
-
SHA256
48627f1baad98b179f13798c6e81634d739c1e3a10666ff5fa92aade6122fc58
-
SHA512
7490fec63001ff2a17cc7b52568086f18a826001ae17eead7a1fd589454d4c5e2da1cb393d476b2f3c8ddf665ece58dc6d65eab2872c89ca6b0a726400615f32
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x82vnh:6uaTmkZJ+naie5OTamgEoKxLWcIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
48627f1baad98b179f13798c6e81634d739c1e3a10666ff5fa92aade6122fc58.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections