General
-
Target
63516e89c0ee917e2a5eb29ba3a310deff88a58631dd12bf207a7f06bd02d681.exe
-
Size
707KB
-
MD5
52380ffbca68f8dfcb658f402c93c111
-
SHA1
7aad33f9e26487240656ae1fc79462329c659867
-
SHA256
63516e89c0ee917e2a5eb29ba3a310deff88a58631dd12bf207a7f06bd02d681
-
SHA512
64367cda771c3a17bffce8070920a16d9798b3d85211b171d47f08f3646eb70eec482fd162d0f6b8bdbedfd27d742e2d0defc114bcf587fab5c1c26349f3a50b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1986vnh:6uaTmkZJ+naie5OTamgEoKxLW4Uh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
63516e89c0ee917e2a5eb29ba3a310deff88a58631dd12bf207a7f06bd02d681.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections