General
-
Target
563590fde22ade84ed6ddcafe5a403f9c0564e813815fc52f10733072254ff9e.exe
-
Size
707KB
-
MD5
8cfaaa2988f9b8bc7a06bab70434f9cd
-
SHA1
63eebd3d25c3d4e517d31419af4795ac979dc477
-
SHA256
563590fde22ade84ed6ddcafe5a403f9c0564e813815fc52f10733072254ff9e
-
SHA512
ad0d5154240879ad3c6c7abc95e242befa3b25010668bedda38470c92c15726ee196083674854be181601483106370c2ae266e5643105038723e2cbb9e2e8d0f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8Bvnh:6uaTmkZJ+naie5OTamgEoKxLWJVh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
563590fde22ade84ed6ddcafe5a403f9c0564e813815fc52f10733072254ff9e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections