General
-
Target
27dafdb3cd5b1aa06aba9de5d973e3b5ae3623974f86a152ab749e2325deb4e4.exe
-
Size
707KB
-
MD5
63a255d990760e6d3cd0e62cd6d84405
-
SHA1
f2de336e9a572459e0903a85eb5bfd3f71081e5b
-
SHA256
27dafdb3cd5b1aa06aba9de5d973e3b5ae3623974f86a152ab749e2325deb4e4
-
SHA512
a8c3428554d8398a4b8342564c67af7b414b85a5828ac231cef815182ba27962e4f7bdd6a63aeaa907f836d64f906ad78128ecf0288dc81eb05f79f767704388
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza168wvnh:6uaTmkZJ+naie5OTamgEoKxLW5uh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
27dafdb3cd5b1aa06aba9de5d973e3b5ae3623974f86a152ab749e2325deb4e4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections