General
-
Target
63d24dab273f2f5a572969e493710c9fc2807e947551eecdc067cc592fa58915.exe
-
Size
707KB
-
MD5
80201ec823971807dc3bb34d40ec9d89
-
SHA1
adc91759cd195bcf4446d992425abfbe00c2ef5a
-
SHA256
63d24dab273f2f5a572969e493710c9fc2807e947551eecdc067cc592fa58915
-
SHA512
67fa8f5e2626b4d279bbd7b53056f28e12093f245806211a003c95e0af548f6541edb9ae14676cc36512f4d3f591693b5358942ae8f2a9eead2af7c6780b7d56
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8mvnh:6uaTmkZJ+naie5OTamgEoKxLWTYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
63d24dab273f2f5a572969e493710c9fc2807e947551eecdc067cc592fa58915.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections