General
-
Target
563ded3e24c6741259fb9bc5cf48cd1e41cd754d73483c143dcecae4b77048ba.exe
-
Size
707KB
-
MD5
51b6a87ebc8458bac8fd4c05c2e816ba
-
SHA1
4591c991fefffd70eb033a15657dbe7e09261842
-
SHA256
563ded3e24c6741259fb9bc5cf48cd1e41cd754d73483c143dcecae4b77048ba
-
SHA512
d4c81f686f79d55b2f7f507c976ae69a36a49eac5231d365e401a76ac8350b3712d4d5d6c115c92075022afccafe9e9440d4d46f68b9b055d699370e60241d2b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158nvnh:6uaTmkZJ+naie5OTamgEoKxLWEvh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
563ded3e24c6741259fb9bc5cf48cd1e41cd754d73483c143dcecae4b77048ba.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections