General
-
Target
663d449288a56a2884fc5490f1cd000ecc1d3dc690332a67d7baddfcbd8f5fd4.exe
-
Size
707KB
-
MD5
fb93fd3ba34b45891ffa91c5e08a1dd9
-
SHA1
66a0e3b79567e10ea2b129b35ea07ab09cb1947e
-
SHA256
663d449288a56a2884fc5490f1cd000ecc1d3dc690332a67d7baddfcbd8f5fd4
-
SHA512
39b12f617ec20467b7af4d110d13cd7320a8491a50a27eefc94f31091bd16cd33990ee04b7dc5403266a515a5b97a6a3894c84f3d923f148a70892e49f22af4f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178Qvnh:6uaTmkZJ+naie5OTamgEoKxLWSOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
663d449288a56a2884fc5490f1cd000ecc1d3dc690332a67d7baddfcbd8f5fd4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections