General
-
Target
063d1b0005db11df05b87cb94f4684353cc559f8ea0e5447b758ea2a81860bce.exe
-
Size
707KB
-
MD5
270b64f87b25e6d75386bfaa1a354ef1
-
SHA1
28decb2e4e385beebbff26d73ab49208717c7543
-
SHA256
063d1b0005db11df05b87cb94f4684353cc559f8ea0e5447b758ea2a81860bce
-
SHA512
f38cf2d1a4998a3b4d991e29f5ab50241611085c263c51a7f02463c15cc70fdc15e9828317e2d73176279e5c793b646d215ef950d4531bcf1eaf464cbdeb2014
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158Uvnh:6uaTmkZJ+naie5OTamgEoKxLWcqh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
063d1b0005db11df05b87cb94f4684353cc559f8ea0e5447b758ea2a81860bce.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections