General
-
Target
27550b4bb5208cd4ffd91df924836f686ffe0de47567246e7d6ce76a71548101.exe
-
Size
707KB
-
MD5
60f55337fde6e8bd37de19e11b1f15ce
-
SHA1
ce45a715d60aaa32b88c759b0a59e2023963972b
-
SHA256
27550b4bb5208cd4ffd91df924836f686ffe0de47567246e7d6ce76a71548101
-
SHA512
72cd711b4df80dbbc84c0946e37cd79b57cbf6747031977ff9035a15770b6eb38e8f6bfe222102b4e67a56952c3b85650970c2bce6198efdbdbb3eee75d1bd1e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8svnh:6uaTmkZJ+naie5OTamgEoKxLWFyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
27550b4bb5208cd4ffd91df924836f686ffe0de47567246e7d6ce76a71548101.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections