General
-
Target
63b049b2b16d7cfedcff12825cf7aaf462b37279ce2a4754b8d6bdaf74362f72.exe
-
Size
707KB
-
MD5
36c7a775d9ae0c2c6ccb44e938b37f13
-
SHA1
f0d1888484a41502a1b4f4bfb08559503f5c4971
-
SHA256
63b049b2b16d7cfedcff12825cf7aaf462b37279ce2a4754b8d6bdaf74362f72
-
SHA512
e0fbd32af2683249be266806fefbb6b2e90d7ce323128d3bbe4b5a19863be12eae3544a2de36ac9d4d25e8bd803af4a6ac026bf4dc8d370ce91c78599cc464c5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O8pvnh:6uaTmkZJ+naie5OTamgEoKxLW1Nh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
63b049b2b16d7cfedcff12825cf7aaf462b37279ce2a4754b8d6bdaf74362f72.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections