General
-
Target
04dd27ab0e38d87a2cd286fddbbfd6f940c07439a0f65a1e857458826910d878.exe
-
Size
707KB
-
MD5
32fd310435c9fe31f46141a36ef27a97
-
SHA1
8a3685389a7279403d7fa63a155c8f2791d8cb60
-
SHA256
04dd27ab0e38d87a2cd286fddbbfd6f940c07439a0f65a1e857458826910d878
-
SHA512
e6d1b7887b9159049802fd58018f355b070206f24c1e573d6c822b3b99d3dbbd7ffc690fa0a6c78aed13a1963e98159b204114af83bde8781a76015c71c20135
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T84vnh:6uaTmkZJ+naie5OTamgEoKxLWaGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
04dd27ab0e38d87a2cd286fddbbfd6f940c07439a0f65a1e857458826910d878.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections