General
-
Target
27110710c5d66abc36a5c6f946defb4e593ef1f29440b98800f41769c7ba08aa.exe
-
Size
707KB
-
MD5
3a1a624966daeff3ad3d28b8d5e900f2
-
SHA1
e0a017ca29dbf6f6c43244c08599b0f0f0092f94
-
SHA256
27110710c5d66abc36a5c6f946defb4e593ef1f29440b98800f41769c7ba08aa
-
SHA512
910238dad20c3edd7679c6a6703848928e1e2758248273987b1a99595c95ac16f2bced158f93b9fa7f58269719de141159f0936001ccd97b76435e4ea9d9c92e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s89vnh:6uaTmkZJ+naie5OTamgEoKxLWfJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
27110710c5d66abc36a5c6f946defb4e593ef1f29440b98800f41769c7ba08aa.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections