General
-
Target
62324b15682efbe5e96706c951824c17727ebd0bcc6835f79515352d72e26803.exe
-
Size
707KB
-
MD5
27fdf0a3809a39f4414731a576901e92
-
SHA1
1e3a05d5fd61a3804430cc315779af57d29a710c
-
SHA256
62324b15682efbe5e96706c951824c17727ebd0bcc6835f79515352d72e26803
-
SHA512
31776bd0471bdcd0401c1a1ed737c1a702c66d87b3f09f7b3d531d0f4510fd88f9fe01c19ed8109ef4f7599425e8b58435b09a3343fb8e1c76b268d49378c5ac
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g81vnh:6uaTmkZJ+naie5OTamgEoKxLWjxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
62324b15682efbe5e96706c951824c17727ebd0bcc6835f79515352d72e26803.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections