General
-
Target
27741264073ace7c2f2ce57a5ff87623fc74c62ec7fbe5e327d61ecf593dd584.exe
-
Size
707KB
-
MD5
9966ceeb4b212e951aa096c7d2570665
-
SHA1
edf734f75be7263fdaef70ee6b945565310d1a70
-
SHA256
27741264073ace7c2f2ce57a5ff87623fc74c62ec7fbe5e327d61ecf593dd584
-
SHA512
5d260a34cc8a05e7449ef858d9e71ede649e4cdb7f9a4207db17b5579e278643328930282180aa6f233a566c6a9db45e6623efab9a6f2a0758dcc9c1189f34a6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M81vnh:6uaTmkZJ+naie5OTamgEoKxLWXxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
27741264073ace7c2f2ce57a5ff87623fc74c62ec7fbe5e327d61ecf593dd584.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections